Classic Editor and Classic Widgets

Classic Editor and Classic Widgets has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.5 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include SQL Injection.

Every one of the 2 issues recorded for Classic Editor and Classic Widgets has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Classic Editor and Classic Widgets is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Classic Editor and Classic Widgets vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2024-47312

Classic Editor and Classic Widgets <= 1.4.1 - Authenticated (Subscriber+) SQL Injection

Read the full analysis

Vulnerability Records

2 records


2024-09-25 00:00	Classic Editor and Classic Widgets <= 1.4.1 - Authenticated (Subscriber+) SQL Injection Classic Editor and Classic Widgets <= 1.4.1	`CVE-2024-47312`	6.5 Medium	Hakiduck	Yes
2023-03-03 00:00	Classic Editor and Classic Widgets <= 1.2.5 - Cross-Site Request Forgery via render_settings_page Classic Editor and Classic Widgets <= 1.2.5	`CVE-2023-27434`	4.3 Medium	Rio Darmawan	Yes

Showing 1–2 of 2 reports

Latestv1.5.5

Classic Editor and Classic Widgets

Author

WP Grim

5.0(5)

100/100

Last Updated

2026-08-19 (25d ago)

Active Installs

20,000+

Downloads

344,666

Requires WP

4.9+

Requires PHP

5.6+

Tested up to

WP 7.1

Created

2021-07-08 (5y ago)

The free Classic Editor & Classic Widgets plugin helps you to easily disable Gutenberg editor totally everywhere and enables Classic Editor and Classic Widgets. Classic Editor and Classic Widgets plugin enables old-style WordPress Classic Editor for “Edit Post” with TinyMCE (WYSIWYG), Meta Boxes (Custom Fields), and others. Once activated, this plugin hides all functionality available in the new Gutenberg block editor. What does this plugin do? Disables the Gutenberg Editor Enables WordPress Classic Editor Enables Classic Widgets Features Disable Gutenberg totally Disable Gutenberg for any post type Editor Switcher Choose Editor for each Post Choose Default Editor Choose Widgets Editor Full Support Advanced Custom Fields (ACF) Hide plugin menu item Enable/Disable frontend Gutenberg styles WooCommerce compatible WPML Compatible Polylang compatible Also, you will be able to use old-style Classic Widgets under Appearance > Widgets and Appearance > Customize > Widgets. There is no need to setup any configuration. By default, this plugin hides all functionality available in the new Gutenberg block editor without setting up any extra options. Upgrade to Pro Version Classic Editor and Classic Widgets PRO plugin provides more additional features. Go to the Next Level with Pro Version. Pro plugin works together with this Free Plugin and does not need any re-installation or deactivation of Free version. Premium Features Choose Editor for User Roles Choose Editor for Custom Post Types Remember Last used Editor Displaying Post States Exclude Posts/Pages by Autocomplete Premium Support ⭐ Get PRO Version Now More Powerful Plugins Dynamic XML Sitemaps for Google Developed with love by WP Grim

View on WordPress.org