Skip to content
OpenAdvisories
High · 7.5 CVE-2025-3703 EUVD-2025-24726GHSA-3hx8-v7h4-vj64

WordPress CSS & JavaScript Toolbox plugin < 12.0.3 - Local File Inclusion vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wipeoutmedia CSS & JavaScript Toolbox css-javascript-toolbox allows PHP Local File Inclusion.This issue affects CSS & JavaScript Toolbox: from n/a through < 12.0.3.

Affected products

VendorProductAffectedFixed
wipeoutmedia CSS & JavaScript Toolbox ≤ 12.0.3 —

References