WP Editor, CVE-2025-3295

CVE, Research URL: CVE-2025-3295
Home page URL: Security reports for WP Editor
Application: WP Editor
Published on: Apr 17, 2025
Research Description: The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to read arbitrary files on the affected site's server which may reveal sensitive information.
Affected versions: max 1.2.9.2.
Status: vulnerable