Alex Prokopenko / JustCoded vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.1%	CVE-2025-62871Just TinyMCE Custom Styles (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-09CVE Database V5CVE-2025-62871 Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just TinyMCE Custom Styles just-tinymce-styles allows Cross Site Request Forgery.This issue affects Just TinyMCE Custom Styles: from n/a through <= 1.2.1. EPSS 0.1%Vulnerability Alex Prokopenko / JustCoded CWE-352	CVE Database V5	2025-12-09
High	7.5	EPSS 1.1%	CVE-2025-32156Just Post Preview Widget (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 1.1%2025-04-04CVE Database V5CVE-2025-32156 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Alex Prokopenko / JustCoded Just Post Preview Widget just-post-preview allows PHP Local File Inclusion.This issue affects Just Post Preview Widget: from n/a through <= 1.1.1. EPSS 1.1%Vulnerability Alex Prokopenko / JustCoded	CVE Database V5	2025-04-04
Medium	4.3	EPSS 0.2%	CVE-2025-27336Just Variables (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-02-24CVE Database V5CVE-2025-27336 Cross-Site Request Forgery (CSRF) vulnerability in Alex Prokopenko / JustCoded Just Variables just-wp-variables allows Cross Site Request Forgery.This issue affects Just Variables: from n/a through <= 1.2.3. EPSS 0.2%Vulnerability Alex Prokopenko / JustCoded	CVE Database V5	2025-02-24

Page 1 of 1