Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-57766 2 Wordpress, Xplodedthemes 2 Wordpress, Wpide - File Manager & Code Editor 2026-07-02 8.8 High
Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions.
CVE-2022-2261 1 Xplodedthemes 1 Wpide 2024-11-21 7.2 High
The WPIDE WordPress plugin before 3.0 does not sanitize and validate the filename parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue.