Tinymce Color Picker vulnerabilities

• tinymce color picker Cross-site request forgery (CSRF) vulnerability in the TinyMCE Color Picker plugin before 1.2 for... CVE-2014-3845 6.8 MediumMay 22, 2014
• tinymce color picker The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions,... CVE-2014-3844 5.0 MediumMay 22, 2014