Ultimate TinyMCE

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in Ultimate TinyMCE 5.7

    Open

    The TinyMCE plugin for WordPress, called "Ultimate," has a security issue where hackers can insert harmful code into web pages. This can happen on any version up to 5.7, because the plugin doesn't pr...

    Read More
  • Input validation vulnerability in Ultimate TinyMCE 3.6

    Fixed

    The Ultimate TinyMCE plugin for WordPress is a potential security risk if you are using an older version. Attackers can use this vulnerability to inject malicious web scripts into your browser, which...

    Read More
  • Input validation vulnerability in SWFUpload (40 plugins affected)

    Fixed

    Cross-site scripting (XSS) is a type of vulnerability that allows attackers to inject malicious code into webpages. In the case of SWFUpload 2.2.0.1 and earlier, WordPress before 3.3.2, TinyMCE Image...

    Read More