Read the docs

WaspThemes

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

WaspThemes records in CISA KEV

No WaspThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Custom Css Pro 1 record MEDIUM Visual Css Style Editor 1 record LOW Yellowpencil 1 record MEDIUM

Records

1 record in Custom Css Pro · all components

TI-2019-04274 CVE-2019-5984 · GHSA-668g-wq5h-h497

Cross-site request forgery in WaspThemes Custom CSS Pro

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01008 Published 2019-07-05 No fix listed CWE-352
Open these records in search →