CVE-2021-4418

🗓️ 20 Oct 2023 08:15:11Reported by [email protected]Type

The Custom CSS, JS & PHP plugin for WordPress has Cross-Site Request Forgery vulnerability up to version 2.0.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-4418	20 Oct 202317:22	–	circl
CNNVD	WordPress Plugin Custom CSS, JS & PHP Cross-Site Request Forgery Vulnerability	20 Oct 202300:00	–	cnnvd
CVE	CVE-2021-4418	20 Oct 202307:29	–	cve
Cvelist	CVE-2021-4418 Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass	20 Oct 202307:29	–	cvelist
EUVD	EUVD-2021-34245	3 Oct 202520:07	–	euvd
OSV	CVE-2021-4418	20 Oct 202308:15	–	osv
Prion	Cross site request forgery (csrf)	20 Oct 202308:15	–	prion
RedhatCVE	CVE-2021-4418	22 May 202520:50	–	redhatcve
Vulnrichment	CVE-2021-4418 Custom CSS, JS & PHP <= 2.0.7 - Cross-Site Request Forgery Bypass	20 Oct 202307:29	–	vulnrichment

NVD

Node

Source	Link
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-5/
plugins	www.plugins.trac.wordpress.org/browser/custom-css-js-php/trunk/modules/code/model.code.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d21dc02f-789c-497e-9d01-02fa49bf9e30
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-1/
blog	www.blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-4/
blog	www.blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/
blog	www.blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/

17 Jun 2026 04:19Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.3

EPSS0.00397