WP Editor

Authenticated (Administrator+) Directory Traversal to Arbitrary File Read vulnerability <= 1.2.9.1

Authenticated (Administrator+) Directory Traversal to Arbitrary File Update vulnerability <= 1.2.9.1

Authenticated (Admin+) PHAR Deserialization vulnerability <= 1.2.9

Reflected Cross Site Scripting (XSS) vulnerability <= 1.2.8

Sensitive Data Exposure vulnerability <= 1.2.7