Advisories · Technology

wipeoutmedia CSS & JavaScript Toolbox.

Every CVE that names wipeoutmedia CSS & JavaScript Toolbox among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-14814 CVE record

CVSS 6.4 Medium

CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via cjtoolbox Shortcode
- wipeoutmedia CSS & JavaScript Toolbox
- Cross-site scripting (XSS)
Not analysed yet 25 Sept 2026
CVE-2025-13533 CVE record

CVSS 4.4 Medium

CSS & JavaScript Toolbox <= 12.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Assignment Engine Fields
- wipeoutmedia CSS & JavaScript Toolbox
- Cross-site scripting (XSS)
Not analysed yet 18 Sept 2026
CVE-2025-11928 CVE record

CVSS 4.4 Medium

CSS & JavaScript Toolbox <= 12.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting
- wipeoutmedia CSS & JavaScript Toolbox
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2025
CVE-2025-3703 CVE record

CVSS 7.5 High

WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability
- wipeoutmedia CSS & JavaScript Toolbox
- File inclusion
Not analysed yet 14 Aug 2025