WordPress Plugin WP Editor Multiple Vulnerabilities (1.2.5.3)
Description
WordPress Plugin WP Editor is prone to multiple vulnerabilities, including arbitrary file modification and arbitrary file disclosure vulnerability. An attacker can exploit these vulnerabilities to modify local files in the context of the web server process, which may result in privilege escalation, or to view local files (eg. server configuration), which may aid in launching further attacks. WordPress Plugin WP Editor version 1.2.5.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.2.6 or latest