Approved changes feed: RSS · Atom

cpe:2.3:a:tinymce:color_picker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTinymce (b8cbecb7-0de8-5f1a-b84b-b947b265b5a4)
ProductColor Picker (904e9bdb-3610-5222-bd99-b27d3a3df440)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3845 vulnerable 2026-06-08 05:05:43.047333 Details available
Cross-site request forgery (CSRF) vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change plugin settings via unknown vectors. NOTE: some of these details are obtained from third party information.
Published: 2014-05-22T15:00:00.000Z
Updated: 2024-09-17T02:46:33.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3844 vulnerable 2026-06-08 05:05:43.046924 Details available
The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information.
Published: 2014-05-22T15:00:00.000Z
Updated: 2024-09-16T18:02:47.623Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.