Volerion logoVolerion
Volerion logoVolerion

WP Editor WordPress Plugin Arbitrary File Read Vulnerability

Vulnerability

A directory traversal vulnerability allowing arbitrary file read has been identified in the WP Editor plugin for WordPress, affecting all versions through 1.2.9.1. This vulnerability enables authenticated attackers with Administrator-level access and above to read arbitrary files on the server, potentially exposing sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server, which may contain confidential information.

Remediation

Users are advised to update the WP Editor plugin to version 1.2.9.2 or a newer patched version.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
2.5
exploitability
5.6
remediation
7.7
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.