VendorsYellowPencilvisual_css_style_editorany version
Vulnerabilities

YellowPencil Visual CSS Style Editor any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2019-11886
The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstrated by use of yp_remote_get to obtain admin access.
Published 2019-05-13 · Modified
8.8EPSS 0.019
CVE-2021-24934
Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting
Published 2022-02-01 · Modified
6.1EPSS 0.014