Known Vulnerabilities for Custom CSS And JavaScript by WP Zone
Listed below are 10 of the newest known vulnerabilities associated with "Custom CSS And JavaScript" by "WP Zone".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-88057 json | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other lang... | Not Provided | 2026-09-10 | 2026-09-11 |
| CVE-2026-85678 json | The AI Builder WordPress plugin before 2.7.8 does not sanitise custom JavaScript saved against a post before echoing it insi... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-84673 json | Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configuration ... | Not Provided | 2026-09-02 | 2026-09-02 |
| CVE-2026-83545 json | The CoolClock WordPress plugin before 4.3.8 does not properly escape a custom skin setting before outputting it inside an inl... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-81925 json | Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date format when rendering conversation messages, res... | Not Provided | 2026-09-15 | 2026-09-16 |
| CVE-2026-81911 json | Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The custom_slot save_template e... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-76833 json | @cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaSc... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-73483 json | Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm ... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-73335 json | Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malici... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-73032 json | PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScri... | Not Provided | 2026-08-11 | 2026-08-11 |