WordPress plugin
JVM Rich Text Icons security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium0
- Low0
All JVM Rich Text Icons vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Directory Traversal to Authenticated(Subscriber+) Arbitrary File Deletion ≤1.2.6Update to 1.2.7 | CVE-2023-51418 | |
| High8.8 | Authenticated(Subscriber+) Arbitrary File Upload ≤1.2.3Update to 1.2.4 | CVE-2023-51417 |
- High8.8Directory Traversal to Authenticated(Subscriber+) Arbitrary File Deletion
≤1.2.6Update to 1.2.7
- High8.8Authenticated(Subscriber+) Arbitrary File Upload
≤1.2.3Update to 1.2.4
JVM Rich Text Icons: common questions
Does JVM Rich Text Icons have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in JVM Rich Text Icons: 2 high. None are known to affect version null.
How do I check which version of JVM Rich Text Icons I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent JVM Rich Text Icons vulnerability?
CVE-2023-51418, published Dec 27, 2023: JVM rich text icons <= 1.2.6 - Directory Traversal to Authenticated(Subscriber+) Arbitrary File Deletion. Severity: High (CVSS 8.8).
Is any JVM Rich Text Icons vulnerability listed in CISA KEV?
No. None of the known JVM Rich Text Icons vulnerabilities is currently listed in the CISA KEV catalog.