critical9.6
CVE-2025-39601
Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & P…
Impact
Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP custom-css allows Remote Code Inclusion.This issue affects Custom CSS, JS & PHP: from n/a through <= 2.4.1.
Affected products
| Product | Affected versions |
|---|---|
| Custom CSS, JS & PHP: From N/A Through | through 2.4.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.