← WordPress Vulnerabilities
WordPress security by component

CSS JS Files

CSS JS Files is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 05, 2024; the highest published CVSS base score is 4.9.

Plugin slug: css-js-files

CVE-2024-9146: CSS JS Files: Filesystem traversal

CSS JS Files is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.

PublishedOct 05, 2024
Safe version guidanceSee mitigation notes
Published vulnerabilities for css-js-files
Safe version
Oct 05, 2024 CVE-2024-9146
CSS JS Files: Filesystem traversal
CSS JS Files is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The public source does not disclose the vulnerable endpoint, action, parameter or function, so the precise input path remains unknown.
See mitigation notes
CVE4.9
NVDPending