tinymce vulnerabilities and fixes

Recent CVEs affecting tinymce, with upgrade or downgrade steps. 4 tracked.

tinymce has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-28. Highest priority: CVE-2026-47759 (score 36/100).

• CVE-2026-47759 HIGH 8.7 UPGRADE TinyMCE is an open source rich text editor
• CVE-2026-47762 HIGH 8.7 UPGRADE TinyMCE is an open source rich text editor
• CVE-2026-47761 HIGH 8.7 UPGRADE TinyMCE is an open source rich text editor
• CVE-2026-47760 HIGH 8.7 UPGRADE TinyMCE is an open source rich text editor

FAQ

How do I fix tinymce vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tinymce being exploited right now?

None of the tracked tinymce CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tinymce CVE should I patch first?

CVE-2026-47759 currently ranks highest (36/100): TinyMCE is an open source rich text editor.

RSS feed for tinymce · ← Back to latest CVEs