Description

WordPress Plugin Ultimate TinyMCE is prone to multiple unspecified vulnerabilities. No available information exists regarding these issues and their impact on a vulnerable website. WordPress Plugin Ultimate TinyMCE version 5.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 5.1 or latest

References

https://wordpress.org/plugins/ultimate-tinymce/changelog/

Related Vulnerabilities

MySQL CVE-2022-21302 Vulnerability (CVE-2022-21302)

Joomla! Core 1.5.x Cross-Site Scripting (1.5.0 - 1.5.7)

WordPress Plugin ClinicalWP Core Cross-Site Scripting (1.0.5)

WordPress Plugin Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, Aweber-MailOptin Security Bypass (1.2.35.1)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (7.1.18)

Severity

High

Tags

Missing Update