WordPress plugin
WP Admin UI Customize security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All WP Admin UI Customize vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Admin+) Stored Cross-Site Scripting ≤1.5.13Update to 1.5.14 | CVE-2024-53278 | |
| Medium5.5 | Authenticated (Administrator+) Cross-Site Scripting ≤1.5.12Update to 1.5.13 | CVE-2022-3824 |
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤1.5.13Update to 1.5.14
- Medium5.5Authenticated (Administrator+) Cross-Site Scripting
≤1.5.12Update to 1.5.13
WP Admin UI Customize: common questions
Does WP Admin UI Customize have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in WP Admin UI Customize: 2 medium. None are known to affect version null.
How do I check which version of WP Admin UI Customize I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Admin UI Customize vulnerability?
CVE-2024-53278, published Nov 26, 2024: WP Admin UI Customize <= 1.5.13 - Authenticated (Admin+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.4).
Is any WP Admin UI Customize vulnerability listed in CISA KEV?
No. None of the known WP Admin UI Customize vulnerabilities is currently listed in the CISA KEV catalog.