Skip to content
Custom Field Suite Project vulnerabilities
Newest
-
custom field suite project field suite, mgibbs189 custom field suite +1 more
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field
CVE-2024-3562
8.8 High
-
custom field suite project field suite, mgibbs189 custom field suite +1 more
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
CVE-2024-3561
8.8 High
-
custom field suite project field suite, mgibbs189 custom field suite +1 more
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]
CVE-2024-3558
6.4 Medium
-
custom field suite project field suite, matt gibbs custom field suite +1 more
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]
CVE-2024-3559
6.4 Medium
-
custom field suite project field suite, matt gibbs custom field suite +1 more
Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-3068
4.4 Medium
-
custom field suite project field suite, mgibbs189 custom field suite +1 more
Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-0689
4.4 Medium
-
custom field suite project field suite, matt gibbs custom field suite +1 more
WordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32515
5.9 Medium
-
custom field suite project field suite
The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.
CVE-2019-11871
5.4 Medium