TC Custom JavaScript

TC Custom JavaScript has one disclosed vulnerability in the WordSec catalog, all reported in 2020; it is fixed as of September 2026. Their average CVSS score is 8.3, and the most serious one scores 8.3 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for TC Custom JavaScript has a vendor fix available, so running the current release closes it.

All of these findings were reported by Ram. TC Custom JavaScript is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.

Strategic Overview

Avg CVSSHigh

8.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all TC Custom JavaScript vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.3CVE-2020-14063

TC Custom JavaScript <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2020-07-21 00:00	TC Custom JavaScript <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting TC Custom JavaScript < 1.2.2	`CVE-2020-14063`	8.3 High	Ram	Yes

Showing 1–1 of 1 reports

Latestv1.2.3

TC Custom JavaScript

Author

Tiny Code

5.0(8)

100/100

Last Updated

2023-02-24 (4y ago)

Active Installs

10,000+

Downloads

117,153

Requires WP

3.0.0+

Requires PHP

Tested up to

WP 6.1.12

Created

2015-04-24 (12y ago)

Add custom JavaScript to your site from a professional editor in the WordPress admin. TC Custom JavaScript‘s still in early stage. If you have any troubles when using it, or any ideas to improve its features to fit with your work, please do not hesitate to contact us.

View on WordPress.org