Description
Cross-Site Request Forgery (CSRF) vulnerability in POEditor POEditor poeditor allows Path Traversal.This issue affects POEditor: from n/a through <= 0.9.10.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| POEditor | POEditor | ≤ 0.9.10 | — |
High · 7.4
CVE-2025-49237
EUVD-2025-17296GHSA-cfwc-3pfx-265p
WordPress POEditor plugin <= 0.9.10 - CSRF to Arbitrary File Deletion vulnerability
Published Jun 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack