Vulnerabilities and security researches formonsters-editor-10-for-wp-super-edit monsters-editor-10-for-wp-super-edit

Jun 07, 2024

CVE, Research URL: 5837c8098d5a525f036e44b2f5c4e2aeda29a767
Home page URL: Security reports for Monsters Editor for WP Super Edit
Application: Monsters Editor for WP Super Edit
Date: Aug 22, 2012
Research Description: Monsters Editor for WP Super Edit [monsters-editor-10-for-wp-super-edit] < 1.1 (closed) WordPress Monsters Editor for WP Super Edit Plugin - Arbitrary File Upload WordPress Monsters Editor for WP Super Edit plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary PHP code and run it in the context of the Web server process. This may facilitate unauthorized access or privilege escalation. Update the plugin.
Affected versions: max 1.1.
Status: vulnerable

Jun 16, 2026

CVE, Research URL: f3eac547-a3b5-45ad-95f0-cbb6d740ec1e
Home page URL: Security reports for Monsters Editor for WP Super Edit
Application: Monsters Editor for WP Super Edit
Date: -
Research Description: Monsters Editor for WP Super Edit [monsters-editor-10-for-wp-super-edit] <= 1.1 (unfixed + closed) Monsters Editor - Arbitrary File Upload The Monsters Editor for WP Super Edit WordPress plugin was affected by an Arbitrary File Upload security vulnerability.
Affected versions: max 1.1.
Status: vulnerable

CVE, Research URL: d0a81ab1a31e3174652a37b761ad1d8c6f260569
Home page URL: Security reports for Monsters Editor for WP Super Edit
Application: Monsters Editor for WP Super Edit
Date: Aug 22, 2012
Research Description: Monsters Editor for WP Super Edit [monsters-editor-10-for-wp-super-edit] <= 1.1 (unfixed + closed) Monsters Editor for WP Super Edit <= 1.1 - Arbitrary File Upload The Monsters Editor plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'test.html' page in versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected versions: max 1.1.
Status: vulnerable