Skip to content

Product

scribu Front-end Editor vulnerabilities

1 published CVE affecting scribu Front-end Editor, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest scribu Front-end Editor CVEs

Newest publication first

  1. CVE-2012-10019 Front-end Editor < 2.3 - Arbitrary File Upload

    Published
    CriticalCVSS 9.8 EPSS 3.8% Framework module

    The Front End Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the upload.php file in versions before 2.3. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.