Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Alex Prokopenko / JustCoded Clear all filters
TI-2025-39021 CVE-2025-62871 · GHSA-m7g3-qvvx-94r5

WordPress Just TinyMCE Custom Styles plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just TinyMCE Custom Styles just-tinymce-styles allows Cross Site Request Forgery.This issue affects Just TinyMCE Custom Styles: from n/a thro…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00131 Published 2025-12-09 No fix listed CWE-352
TI-2025-23254 CVE-2025-32156 · GHSA-jv55-2g67-7p8f

WordPress Just Post Preview Widget plugin <= 1.1.1 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alex Prokopenko / JustCoded Just Post Preview Widget just-post-preview allows PHP Local File Inclus…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01142 Published 2025-04-04 No fix listed CWE-98