Extension WordPress
Vulnérabilités CSS & JavaScript Toolbox
Cette page rassemble les failles publiées pour CSS & JavaScript Toolbox, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CSS & JavaScript Toolbox
4 fiches
CSS & JavaScript Toolbox <= 12.0.5 – Authenticated (Admin+) Stored Cross-Site Scripting
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 12.0.5 due to insufficient input sanitization and output escaping. This makes it possible for…
*-12.0.5
12.0.6
31/10/2025
CSS & JavaScript Toolbox < 12.0.3 – Authenticated (Subscriber+) Local File Inclusion
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Local File Inclusion in versions up to 12.0.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to include and execute arbitrary files on…
[*, 12.0.3)
12.0.3
22/07/2025
CSS & JavaScript Toolbox <= 11.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 11.8 due to insufficient input sanitization and output escaping on user supplied attributes.…
*-11.8
11.9
19/12/2023
CSS & JavaScript Toolbox <= 8.4.1 – Information Exposure
The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 8.4.1 by accessing '/wp-content/plugins/css-javascript-toolbox/models/uninstall/db/mysql/uninstall.sql' on a vulnerable sites. This can allow unauthenticated attackers to extract sensitive data such…
*-8.4.1
8.4.2
08/12/2018
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.