benjaminrojas CVE Vulnerabilities & Metrics

Focus on benjaminrojas vulnerabilities and metrics.

Last updated: 01 Aug 2025, 22:25 UTC

About benjaminrojas Security Exposure

This page consolidates all known Common Vulnerabilities and Exposures (CVEs) associated with benjaminrojas. We track both calendar-based metrics (using fixed periods) and rolling metrics (using gliding windows) to give you a comprehensive view of security trends and risk evolution. Use these insights to assess risk and plan your patching strategy.

For a broader perspective on cybersecurity threats, explore the comprehensive list of CVEs by vendor and product. Stay updated on critical vulnerabilities affecting major software and hardware providers.

Global CVE Overview

Total benjaminrojas CVEs: 7
Earliest CVE date: 14 Aug 2019, 16:15 UTC
Latest CVE date: 17 Apr 2025, 06:15 UTC

Latest CVE reference: CVE-2025-3295

Rolling Stats

30-day Count (Rolling): 0
365-day Count (Rolling): 3

Calendar-based Variation

Calendar-based Variation compares a fixed calendar period (e.g., this month versus the same month last year), while Rolling Growth Rate uses a continuous window (e.g., last 30 days versus the previous 30 days) to capture trends independent of calendar boundaries.

Variations & Growth

Month Variation (Calendar): 0%
Year Variation (Calendar): 50.0%

Month Growth Rate (30-day Rolling): 0.0%
Year Growth Rate (365-day Rolling): 50.0%

Monthly CVE Trends (current vs previous Year)

Annual CVE Trends (Last 20 Years)

Critical benjaminrojas CVEs (CVSS ≥ 9) Over 20 Years

CVSS Stats

Average CVSS: 2.04

Max CVSS: 7.5

Critical CVEs (≥9): 0

CVSS Range vs. Count

Range Count
0.0-3.9 5
4.0-6.9 1
7.0-8.9 1
9.0-10.0 0

CVSS Distribution Chart

Top 5 Highest CVSS benjaminrojas CVEs

These are the five CVEs with the highest CVSS scores for benjaminrojas, sorted by severity first and recency.

All CVEs for benjaminrojas

CVE-2025-3295 benjaminrojas vulnerability CVSS: 0 17 Apr 2025, 06:15 UTC

The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to read arbitrary files on the affected site's server which may reveal sensitive information.

CVE-2025-3294 benjaminrojas vulnerability CVSS: 0 17 Apr 2025, 06:15 UTC

The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and including, 1.2.9.1. This makes it possible for authenticated attackers, with Administrator-level access and above, to overwrite arbitrary files on the affected site's server which may make remote code execution possible assuming the files can be written to by the web server.

CVE-2022-2446 benjaminrojas vulnerability CVSS: 0 13 Sep 2024, 15:15 UTC

The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including 1.2.9. This makes it possible for authenticated attackers with administrative privileges to call files using a PHAR wrapper that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain is also present. It also requires that the attacker is successful in uploading a file with the serialized payload.

CVE-2024-25591 benjaminrojas vulnerability CVSS: 0 17 Mar 2024, 17:15 UTC

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Benjamin Rojas WP Editor.This issue affects WP Editor: from n/a through 1.2.7.

CVE-2021-24151 benjaminrojas vulnerability CVSS: 0 16 Jan 2024, 16:15 UTC

The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated (admin+) blind SQL injection issue via an arbitrary parameter when making a request to save the settings.

CVE-2016-10886 benjaminrojas vulnerability CVSS: 7.5 14 Aug 2019, 16:15 UTC

The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions.

CVE-2016-10885 benjaminrojas vulnerability CVSS: 6.8 14 Aug 2019, 16:15 UTC

The wp-editor plugin before 1.2.6 for WordPress has CSRF.