Skip to content

Product

tinymce color picker vulnerabilities

2 published CVES affecting tinymce color picker, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest tinymce color picker CVEs

Newest publication first

  1. CVE-2014-3845 TinyMCE Color Picker < 1.2 - Cross-Site Request Forgery

    Published
    MediumCVSS 6.8 EPSS 0.95%

    Cross-site request forgery (CSRF) vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change plugin settings via unknown vectors. NOTE: some of these details are obta...

  2. CVE-2014-3844 TinyMCE Color Picker <= 1.1 - Missing Authorization

    Published
    MediumCVSS 5.0 EPSS 1.8%

    The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.