TailPress – Tailwind for WordPress

TailPress – Tailwind for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).

The one issue recorded for TailPress – Tailwind for WordPress has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nguyễn Trung Kiên. TailPress – Tailwind for WordPress is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all TailPress – Tailwind for WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-31558

TailPress <= 0.4.4 - Unauthenticated Sensitive Information Exposure

Read the full analysis

Vulnerability Records

1 records
TailPress – Tailwind for WordPress banner
Latestv0.4.4

TailPress – Tailwind for WordPress

Greg

Author

Greg

5.0(13)
100/100
Last Updated
2023-04-04 (4y ago)
Active Installs
500+
Downloads
14,446
Requires WP
5.2+
Requires PHP
7.0+
Tested up to
WP 6.1.12
Created
2022-06-09 (4y ago)

Tailwind CSS is a great companion to building block based sites in WordPress. Unfortunately, it’s been pretty complicated to add Tailwind CSS to WordPress since it needs to be compiled with Node.js in order to be production ready. This plugin takes care of that by adding Tailwind CSS to WordPress in one easy step (activate the plugin) and at the same time takes care of performance and caching so your site remains fast and production ready! Who It’s For This is primarily for developers and users that are familiar with Tailwind CSS and comfortable styling their site using their utility class framework. It’s also for those who have struggled to add Tailwind to their workflow without having to constantly compile their CSS every time the classes in their page content changes. How it Works Extracts classes from pages and compiles them server-side into Tailwind CSS Caches the dynamically generated CSS to avoid performance issues on the frontend of your production site. Are you affiliated with tailpress.io the theme? No, we are not! Unfortunately the same name was used for both out of coincidence, but we are not affiliated and are two different solutions. Tailpress.io is a great starting point for developing custom themes with deep integration of Tailwind. I would recommend it for any developer that wants to build a custom theme that depends heavily on Tailwind. Tailpress, this plugin, adds Tailwind support to any project as an add-on. It can be used as much or as little as you need, added to custom themes or pre-existing ones. Can this be used in production? Yes! Although the styles in the backend get generated on the fly, the CSS on the frontend gets cached for every page. Changing any classes on the page will bust the cache automatically so it’ll still stay up to date with any changes. Can this be used outside the block editor? Yes! This will work anywhere on the backend or front end of your site that uses classes to style things. Known Issues Device Preview Mode in Block Editor The non-desktop preview modes in the block editor utilize an iframe and don’t load assets properly. Therefore your Tailwind styles won’t be visible here. Page Caching If you have any page caching on your site, you’ll have to clear your cache for the best experience.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C