Known Vulnerabilities for Editor-core by Atlassian
Listed below are 1 of the newest known vulnerabilities associated with "Editor-core" by "Atlassian".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124434 json | Grav Lightbox Gallery plugin 1.1.0 before 1.3.2 on Grav 2.x calls any medium method named in image, thumb or thumb_options sh... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-113649 json | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of c... | Not Provided | 2026-10-20 | 2026-10-23 |
| CVE-2026-105195 json | The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can lo... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-97020 json | The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-92746 json | The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scrip... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-92619 json | The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 ... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-88976 json | Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-beta.0 through 54.0.0-bet... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-83559 json | Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuotes() ... | Not Provided | 2026-11-01 | 2026-11-06 |
| CVE-2026-77786 json | The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the cap... | Not Provided | 2026-08-29 | 2026-08-30 |
| CVE-2026-76837 json | Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ ... | Not Provided | 2026-08-24 | 2026-08-29 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Atlassian | Editor-core | 99.0.1 | |||
| Application | Atlassian | Editor-core | 99.0.0 | |||
| Application | Atlassian | Editor-core | 98.9.5 | |||
| Application | Atlassian | Editor-core | 98.9.4 | |||
| Application | Atlassian | Editor-core | 98.9.3 | |||
| Application | Atlassian | Editor-core | 98.9.2 | |||
| Application | Atlassian | Editor-core | 98.9.1 | |||
| Application | Atlassian | Editor-core | 98.9.0 | |||
| Application | Atlassian | Editor-core | 98.8.2 | |||
| Application | Atlassian | Editor-core | 98.8.1 | |||
| Application | Atlassian | Editor-core | 98.8.0 | |||
| Application | Atlassian | Editor-core | 98.7.2 | |||
| Application | Atlassian | Editor-core | 98.7.1 | |||
| Application | Atlassian | Editor-core | 98.7.0 | |||
| Application | Atlassian | Editor-core | 98.6.0 | |||
| Application | Atlassian | Editor-core | 98.5.1 | |||
| Application | Atlassian | Editor-core | 98.5.0 | |||
| Application | Atlassian | Editor-core | 98.4.6 | |||
| Application | Atlassian | Editor-core | 98.4.5 | |||
| Application | Atlassian | Editor-core | 98.4.4 |