Custom Body Class
Custom Body Class has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2019; all 2 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2019 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Custom Body Class has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Shirai Masatake. Custom Body Class is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2019-6030Custom Body Class <= 0.6.0 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Custom Body Class
Author
Andrei Lupu
You can use this plugin to add a unique CSS class to your pages or posts. Demo TasteWP has prepared a quick WordPress instance with this plugin, so you can give it a try in this demo Responsiveness There’s a way to add a class to appear only on mobile devices. You can do that by simply adding mobile- on the front of the class. For example, if you want to have the class “car” for mobile side, you need to use “mobile-car”. Support me If you find this plugin helpful, or you just want to send me a coffee here are the ways: Use the Github Sponsor button Ko-fi Watch me coding on twitch.tv/thelup Or simply visit my site lup.dev and make those analytics ring the bells.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C