Description
WordPress Plugin Coditor-Code Editor is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently edit or delete any plugin/theme. WordPress Plugin Coditor-Code Editor version 1.1 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
Atlassian Jira Other Vulnerability (CVE-2019-20101)
WordPress Plugin Admin renamer extended Cross-Site Scripting (3.2)
MyBB Other Vulnerability (CVE-2007-2212)
WordPress Plugin cformsII Multiple Cross-Site Scripting Vulnerabilities (14.13.2)
WordPress Plugin UpdraftPlus WordPress Backup Security Bypass (1.22.1)