Wipeoutmedia CSS & JavaScript Toolbox
4 CVEs affecting Wipeoutmedia CSS & JavaScript Toolbox. Latest disclosed: 2026-09-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3703 | High | 7.5 | 2025-08-14 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wipeoutmedia CSS & JavaScript Toolbox… |
CVE-2025-14814 | Medium | 6.4 | 2026-09-25 | The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cjtoolbox shortcode in all versions up to, and… |
CVE-2025-13533 | Medium | 4.4 | 2026-09-18 | The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 12.0.6 via the Assignment… |
CVE-2025-11928 | Medium | 4.4 | 2025-11-01 | The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 12.0.5… |