← Database

CVE-2025-39601

CRITICAL CVSS: 9.6 Published: 2025-04-16 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through <= 2.4.1.

Affected Platforms

Unknown

Weakness Type

CWE-352

References