Foliopress WYSIWYG
Foliopress WYSIWYG has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10. 2014 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 3 issues recorded for Foliopress WYSIWYG has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Foliopress WYSIWYG is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-32610Foliopress WYSIWYG <= 2.6.18 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Foliopress WYSIWYG
Author
FolioVision
Foliopress WYSIWYG is the editor you were always hoping for, every time you installed a new content management system. Foliopress WYSIWYG is simple and correctly configured straight out of the box. Foliopress WYSIWYG handles images and text equally well. Foliopress WYSIWYG gives you SEO ready images (properly labelled with caption and alt and title tags). Foliopress WYSIWYG is simple enough to use that your clients will love it. Foliopress WYSIWYG has all the extra control and flexibility you want to be able to do advanced coding on your content pages. Foliopress WYSIWYG looks great in your browser window. No more eyesore when using an online text editor. We aren’t living in the 90’s anymore and our online text editors shouldn’t look like WordStar. Foliopress WYSIWYG has easy and quick access to source code for experts so your programmers won’t get frustrated and turn it off. Foliopress WYSIWYG produces standards compliant html quickly and easily. Foliopress WYSIWYG is forgiving: even if you make some terrible HTML/XHTML errors Foliopress WYSIWYG? will always give you or your clients it’s best version of your document without erasing it. Foliopress WYSIWYG does true WYSIWYG. You can actually see the text in your edit box the same way it is in your content box (simple three step point and click configuration). Foliopress WYSIWYG will never go out of date: Foliopress WYSIWYG is assembled from best of breed open source projects so it will always be on the cutting edge of web design. The parts are carefully assembled as modules with no modifications to core code so you can always drop the latest version of the core libraries in for a seamless and instant upgrade. Foliopress WYSIWYG is so easy and fun to use, that you just might want to retire your word processor and write all your documents online. Uses FCKEditor (FCK) with upgrades, equivalent to CKEditor. Includes a fully extended toolbar just like tinyMCE Advanced. Support | Change Log Featured image feature Since version 0.9.19 there is a support for native WordPress Feature Image function. WordPress Uploads folder has to be set to the same path as Foliopress WYSIWYG, otherwise it won’t be displayed.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C