Plugin icon

SiteOrigin CSS

so-css

Vulnerabilities:

2

Last Updated:

October 9, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
SiteOrigin CSS < 1.6.8 - Unauthenticated Stored XSS via Comment Author URL
Fixed in
Fixed in 1.6.8
CVSS
7.2 (high)
Published
2026-10-15
Title
SiteOrigin CSS < 1.6.8 - Unauthenticated Stored XSS via Comment Anchor href
Fixed in
Fixed in 1.6.8
CVSS
8.8 (high)