CVE-2025-39601

Published: 2025-04-16T13:15:52.790

Last Modified: 2025-04-16T13:25:37.340

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-Site Request Forgery (CSRF) vulnerability in WPFactory Custom CSS, JS & PHP allows Remote Code Inclusion. This issue affects Custom CSS, JS & PHP: from n/a through 2.4.1. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt