Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

WaspThemes vulnerabilities

3 published CVEs name WaspThemes among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20191
  2. 20231
  3. 20241

Newest CVEs

  • CVE-2024-43963

    WordPress Visual CSS Style Editor plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability

    WaspThemes · YellowPencil Visual CSS Style Editor

    High7.1
  • CVE-2022-33961

    WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.5.8 is vulnerable to Cross Site Scripting (XSS)

    WaspThemes · Visual CSS Style Editor

    Medium4.0
  • CVE-2019-5984

    Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via…

    WaspThemes · Custom CSS Pro

    High8.8

Products with the most CVEs

  1. Custom CSS Pro1
  2. Visual CSS Style Editor1
  3. YellowPencil Visual CSS Style Editor1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)2
  2. CWE-352 Cross-site request forgery (CSRF)1