Known Vulnerabilities for PO/MO Editor by Dougwollison
Listed below are 10 of the newest known vulnerabilities associated with "PO/MO Editor" by "Dougwollison".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124492 json | SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor's #createBookmarkList, which... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-124434 json | Grav Lightbox Gallery plugin 1.1.0 before 1.3.2 on Grav 2.x calls any medium method named in image, thumb or thumb_options sh... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123840 json | In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123288 json | In JetBrains Datalore before 2026.4 stored XSS in notebook charts was possible via Vega editor link | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-122222 json | The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slug' parameter in all ... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-122144 json | A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af. This vul... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-122041 json | The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary atta... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-121430 json | AzuraCast before 0.24.0 contains a missing authorization vulnerability in the GET and POST /api/station/{station_id}/waveform... | Not Provided | 2026-11-03 | 2026-11-07 |
| CVE-2026-120488 json | LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with post.cre... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120408 json | The All-in-One Video Gallery WordPress plugin before 5.1.0 does not escape a video's stored thumbnail URL before outputting ... | Not Provided | 2026-11-06 | 2026-11-06 |