Vulnerabilities and Security Researches

Custom CSS, JS & PHP, CVE-2025-39601

CVE, Research URL: CVE-2025-39601
Home page URL: Security reports for Custom CSS, JS & PHP
Application: Custom CSS, JS & PHP
Published on: Apr 16, 2025
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP allows Remote Code Inclusion. This issue affects Custom CSS, JS & PHP: from n/a through 2.4.1.
Affected versions: Min -, max 2.4.2.
Status: vulnerable