Simplysymphony Plugnedit vulnerabilities

• simplysymphony plugnedit The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax... CVE-2015-9423 5.4 MediumSeptember 26, 2019
• simplysymphony plugnedit The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via... CVE-2015-9422 6.5 MediumSeptember 26, 2019