WordPress plugin
TinyMCE Color Picker security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
2Known vulnerabilities
- Critical0
- High0
- Medium2
- Low0
All TinyMCE Color Picker vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery <1.2Update to 1.2 | CVE-2014-3845 | |
| Medium5.3 | Missing Authorization ≤1.1Update to 1.2 | CVE-2014-3844 |
- Medium4.3Cross-Site Request Forgery
<1.2Update to 1.2
- Medium5.3Missing Authorization
≤1.1Update to 1.2
TinyMCE Color Picker: common questions
Does TinyMCE Color Picker have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in TinyMCE Color Picker: 2 medium. None are known to affect version null.
How do I check which version of TinyMCE Color Picker I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent TinyMCE Color Picker vulnerability?
CVE-2014-3845, published May 1, 2014: TinyMCE Color Picker < 1.2 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any TinyMCE Color Picker vulnerability listed in CISA KEV?
No. None of the known TinyMCE Color Picker vulnerabilities is currently listed in the CISA KEV catalog.