Add Admin CSS
Add Admin CSS has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for Add Admin CSS has a vendor fix available, so running the current release closes it.
All of these findings were reported by stealthcopter. Add Admin CSS is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-6547Add Admin CSS <= 2.0.1 - Unauthenticated Full Path Dislcosure
Read the full analysisVulnerability Records
Add Admin CSS
Author
Scott Reilly
Ever want to tweak the appearance of the WordPress admin pages by hiding stuff, moving stuff around, changing fonts, colors, sizes, etc? Any modification you may want to do with CSS can easily be done via this plugin. Using this plugin you’ll easily be able to define additional CSS (inline and/or files by URL) to be added to all administration pages. Hooks are provided to customize the output of the CSS, the CSS files, and if/when the CSS should even be output (see Hooks section). Links: Plugin Homepage | Plugin Directory Page | GitHub | Author Homepage Developer Documentation Developer documentation can be found in DEVELOPER-DOCS.md. That documentation covers the hooks provided by the plugin. As an overview, these are the hooks provided by the plugin: c2c_add_admin_css : Filter to customize the CSS that should be added directly to the admin page head. c2c_add_admin_css_files : Filter to customize the list of CSS files to enqueue in the admin. c2c_add_admin_css_disable_css : Filter to customize if the CSS defined via this plugin should be output or not.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C