Veille CVE

Recherche « Unknown Custom css-js-php »

1 CVE

  1. CVE-2026-6433 7.3 Élevée

    Unknown Custom css-js-php

    The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize user input before using it in a SQL query, and the result is passed to eval(), allowing unauthenticated users to execute arbitrary PHP code on the server.