WordPress plugin
Add Custom CSS and JS security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Add Custom CSS and JS vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤1.20No patch available | CVE-2024-3903 |
- Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
≤1.20No patch available
Add Custom CSS and JS: common questions
Does Add Custom CSS and JS have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Add Custom CSS and JS: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Add Custom CSS and JS I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Add Custom CSS and JS vulnerability?
CVE-2024-3903, published Apr 18, 2024: Add Custom CSS and JS <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Add Custom CSS and JS vulnerability listed in CISA KEV?
No. None of the known Add Custom CSS and JS vulnerabilities is currently listed in the CISA KEV catalog.