Tailored Tools vulnerabilities

3 known CVE vulnerabilities in Tailored Tools, translated and rated.

CVE-2026-62025Critical
The Tailored Tools plugin in versions up to and including 3.0.3 contains an unauthenticated arbitrary file upload vulnerability. The lack of required authorization allows exploitation without an account in the application.
CVE-2026-111401Medium
The Tailored Tools plugin for WordPress contains a Cross-Site Request Forgery (CSRF) vulnerability that allows forcing unintended actions on behalf of a logged-in user. This issue affects Tailored Tools versions up to and including 3.0.3.
CVE-2026-81765High
An unauthenticated Cross Site Scripting (XSS) vulnerability in Tailored Tools versions up to and including 3.0.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS