WordPress plugin
WordPress.com Editing Toolkit security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All WordPress.com Editing Toolkit vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.78784Update to 3.79150 | CVE-2023-50879 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.78784Update to 3.79150
WordPress.com Editing Toolkit: common questions
Does WordPress.com Editing Toolkit have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in WordPress.com Editing Toolkit: 1 medium. None are known to affect version null.
How do I check which version of WordPress.com Editing Toolkit I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WordPress.com Editing Toolkit vulnerability?
CVE-2023-50879, published Dec 26, 2023: WordPress.com Editing Toolkit <= 3.78784 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any WordPress.com Editing Toolkit vulnerability listed in CISA KEV?
No. None of the known WordPress.com Editing Toolkit vulnerabilities is currently listed in the CISA KEV catalog.