PoC Index

CVE-2025-39601

CRITICAL 9.6EPSS 0.3%

Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP allows Remote Code Inclusion. This issue affects Custom CSS, JS & PHP: from n/a through 2.4.1.

CVSS v3.1
9.6 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS
0.32% chance of exploitation in the next 30 days, 24th percentile
Published
2025-04-16
Updated
2026-05-12

Proof-of-concept exploits (1)

References

Related