Vulnerabilities / SiteOrigin CSS
SiteOrigin CSS vulnerabilities
Advisories WPSec published for SiteOrigin CSS. Other sources may list more. Its attack surface: SiteOrigin CSS on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-12 | WPSEC-2026-3008 | SiteOrigin CSS <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via CSS Inspector Selector Handling | Medium 5.4 | 1.6.10 |
License: CC BY 4.0