wipeoutmedia

Products

ProductCVEsExploitedLatest
CSS & JavaScript Toolbox4–Sep 25, 2026

Exploited and recent CVEs

  • CVE-2025-14814 Medium 6.4 CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via cjtoolbox Shortcode 0.2%
  • CVE-2025-13533 Medium 4.4 CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Assignment Engine Fields 0.3%
  • CVE-2025-11928 Medium 4.4 CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-3703 High 7.5 WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability 0.7%