Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: WaspThemes Clear all filters
TI-2024-29552 CVE-2024-43963 · GHSA-6mc3-f5wc-vw2x

WordPress Visual CSS Style Editor plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

Priority MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.This issue affects YellowPencil Visual CSS…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00349 Published 2024-08-29 No fix listed CWE-79
TI-2019-04274 CVE-2019-5984 · GHSA-668g-wq5h-h497

Cross-site request forgery in WaspThemes Custom CSS Pro

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01008 Published 2019-07-05 No fix listed CWE-352