Description
Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| XplodedThemes | WPIDE – File Manager & Code Editor | ≤ 3.5.6 | — |
High · 8.8
CVE-2026-57766
EUVD-2026-41321GHSA-jq6p-fffc-h97g
WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability
Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack