Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mndpsingh287 — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting mndpsingh287. AI-powered Chinese analysis, POCs, and references for each vulnerability.

mndpsingh287 is a security researcher focused on identifying vulnerabilities in web applications and enterprise software. Their work primarily centers on uncovering flaws that could lead to remote code execution, cross-site scripting, and privilege escalation. With 13 CVEs attributed to them, they have demonstrated expertise in finding critical weaknesses across multiple platforms. While no major public incidents are directly linked to their findings, their contributions have helped address significant security gaps in various systems. Their research consistently highlights common misconfigurations and input validation flaws, making their work valuable for improving overall software security postures.

CVE ID Title CVSS Severity Published
CVE-2025-14469 Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification — Theme Editor CWE-352 4.3 Medium 2026-08-01
CVE-2026-39640 WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability — Theme Editor CWE-352 9.6 Critical 2026-04-08
CVE-2025-68008 WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability — WP Mail CWE-79 7.1 High 2026-01-22
CVE-2025-9890 Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution — Theme Editor CWE-352 8.8 High 2025-10-18
CVE-2025-58822 WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability — WP Mail CWE-79 6.5 Medium 2025-09-05
CVE-2025-23536 WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability — Track Page Scroll CWE-79 7.1 High 2025-03-03
CVE-2024-37254 WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability — File Manager CWE-862 4.3 Medium 2024-11-01
CVE-2018-25105 File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download — File Manager CWE-862 9.8 Critical 2024-10-16
CVE-2022-2440 Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization — Theme Editor CWE-502 7.2 High 2024-08-29
CVE-2024-2654 File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal — File Manager CWE-35 6.8 Medium 2024-04-09
CVE-2023-6091 WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability — Theme Editor CWE-434 7.2 High 2024-03-26
CVE-2024-1538 File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion — File Manager CWE-352 8.8 High 2024-03-21
CVE-2023-6825 File Manager And File Manager Pro (Multiple Versions) - Directory Traversal — File Manager CWE-23 9.9 Critical 2024-03-13
CVE-2024-0761 File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames — File Manager CWE-330 8.1 High 2024-02-05

This page lists every published CVE security advisory associated with mndpsingh287. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.