Tailored Tools

Tailored Tools has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Tailored Tools has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Tailored Tools is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Tailored Tools vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-81765

Tailored Tools <= 3.0.2 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv3.0.3

Tailored Tools

Tailored Media

Author

Tailored Media

5.0(2)
100/100
Last Updated
2026-08-25 (18d ago)
Active Installs
70+
Downloads
4,325
Requires WP
7.0+
Requires PHP
0+
Tested up to
WP 7.1
Created
2012-07-02 (14y ago)

This plugin contains helper classes used to build custom forms. It’s built by Tailored Media for use on our sites, but anyone is welcome to use it. NOTE: I would discourage installing this on new sites. With Gutenberg & form builder plugins, everything can be done better. This plugin comes with a basic contact form. You can write additional plugins to extend & create more forms. If you are not comfortable writing PHP code, then this plugin is probably not right for you. It also contains some other shortcode helpers for Google Maps, jQuery UI Tabs, and Page Content. Shortcodes This plugin also includes some shortcodes that we tend to use a lot. [tabs] This will apply formatting and javascript to implement jQuery UI Tabs. To use, simply wrap all of your tabbed content in [tabs] … [/tabs] shortcodes. Each H2 element will be a new tab. Some basic CSS is included, and you can write your own in your theme file to customise the look. [pagecontent id=”1&#8243;] Sometimes you need to include the same bit of content in many places on your site. To save time, this shortcode will let you include the content from one page in many places. Just use the shortcode, and provide the ID of the page you want to include. Eg, [pagecontent id=”3&#8243;] will insert all content from the page with ID = 3. Only the content is included by default; use [pagecontent id=”3&#8243; include_title=”yes”] if you also want the page title, which is added as an H2 heading with the class &#8216;pagecontent_title’. Note that a page is only included if the person viewing it would be allowed to read it. Published pages are included for everyone; drafts, private, scheduled and trashed pages are only included for logged-in users with permission to read them. [googlemap address=”123 somewhere street, Kansas”] To embed a Google Map iframe, use this shortcode. Google will geocode your address to determine where the pin goes. You can also specify width, height, and zoom. You can also provide &#8216;class’ to set a CSS class on the iframe element.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C