Wp-super-edit vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wp-super-edit products: 1 record(s), with severity, exploitation and fixes.

WP Super Edit 1

Exploited only (KEV) →

CVE-2021-47965 Critical · 9.8 CWE-434 May 15, 2026

WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Upload

WordPress Plugin WP Super Edit 2.5.4 and earlier contains an unrestricted file upload vulnerability in the FCKeditor component that allows attackers to upload dangerous file types without validation. Attackers can upload arbitrary files through the filemanager upload endpoint to achieve remote code execution and complete system compromise.