Kindeditor For WordPress

Kindeditor For WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2014; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Kindeditor For WordPress has a vendor fix available, so running the current release closes it.

All of these findings were reported by Prajal Kulkarni. Kindeditor For WordPress is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.1.42.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Kindeditor For WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1

Kindeditor For WordPress < 1.4 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2014-05-25 00:00	Kindeditor For WordPress < 1.4 - Reflected Cross-Site Scripting Kindeditor For WordPress <= 1.3.7	`N/A`	6.1 Medium	Prajal Kulkarni	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.4.3

Kindeditor For WordPress

Author

panxianhai

5.0(2)

100/100

Last Updated

2015-04-13 (12y ago)

Active Installs

500+

Downloads

55,844

Requires WP

3.0+

Requires PHP

Tested up to

WP 4.1.42

Created

2011-09-23 (15y ago)

Because most users of this plug-in are Chinese people,following I use Chinese. kindeditor是一个简单高效，易于使用的编辑器，自带代码高亮。

View on WordPress.org