Custom Style
Custom Style has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Custom Style has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Skalucy. Custom Style is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 2.9.2.
CVE-2025-49342Custom Style <= 1.0 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Custom Style
Author
merzedes
What is this plugin about? You are using a theme in WordPress and it looks marvelous good. Well, almost! If you could just change the main color to match your liking, your companys style, .. whatever! It’s actually easy in WordPress, because you have direct access to your themes’ style files. Just use Appearance -> Editor inside the Dashboard and there you go. That’s great until the other day you update your theme because a new, improved and of course much better version has been released. Then all your custom changes are gone and you have to start from scratch again. A much better way is to save additional CSS rules in the blog’s database and include them inside a < style/> element. Of course there must also be a way to enter those rules via the Dahsboard. And this is exactly what this plugin is all about! This simple plugin will add a <style>..</style> element to <head />, thus allowing the administrator to customize the “look” of the theme used without actually changing one of the theme’s files. This allows you to simply update the theme without loosing your valueable changes. Support If you require any help, if something is not working, if you have an idea for improvement, critics, please do not hesitate to contact me by sending an email to wh [at] haefelinger [dot] it or visit the plugin’s home page at http://workbench.haefelinger.it/project/custom-style
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C