Instant CSS
Instant CSS has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Instant CSS has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Instant CSS is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.
CVE-2023-38483Instant CSS <= 1.1.4 - Missing Authorization via AJAX Actions
Read the full analysisVulnerability Records
Instant CSS
Author
dylanblokhuis
Use the power of Visual Studio Code in WordPress to write your CSS or SCSS The plugin uses autoprefixer to parse your CSS/SCSS into CSS that will work on older browsers, no need to write -webkit, -moz or -o. You can also choose to use SCSS, more info about SCSS here: https://sass-lang.com/guide Features Use all the powerful features from Visual Studio Code Your CSS gets compiled with autoprefixer to work on older browsers Use SCSS to create efficient stylesheets with variables, mixins, etc. Option to minify your CSS to reduce loading times No refreshing on saving Live editor updating styles on save and have the browser update simultaneously
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C