Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-57766

WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability

Description

Unauthenticated Cross Site Request Forgery (CSRF) in WPIDE – File Manager & Code Editor <= 3.5.6 versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

XplodedThemes WPIDE – File Manager & Code Editor

Default version status: unaffected

  • n/a to ≤ 3.5.6affected

References