CVE-2015-9422: The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/ad...

Security readout for executives and security teams

This CVE affects older PlugNedit Adaptive Editor installations for WordPress. The issue combines cross-site request forgery with possible cross-site scripting, meaning a tricked site administrator could cause unwanted changes or script execution in the WordPress admin context. No source in the bundle reports active exploitation. Exposure is limited to WordPress sites with PlugNedit Adaptive Editor versions before 6.2.0 installed. The CVE metadata does not identify broader products, CPEs, or default deployment prevalence. Treat as a targeted website hygiene issue rather than an emergency. Prioritize internet-facing or business-critical WordPress sites where this plugin is installed, especially where administrator sessions are exposed to phishing risk. Mitigation focus: Inventory WordPress sites for the PlugNedit Adaptive Editor plugin.; Upgrade the plugin to 6.2.0 or later if present.; Disable or remove the plugin where upgrade is unavailable or unnecessary..

Prepared

Jun 6, 2026, 13:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.