Skip to contentCustom Field Suite Project Field Suite vulnerabilities
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom FieldCVE-2024-35628.8 High
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom FieldCVE-2024-35618.8 High
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]CVE-2024-35586.4 Medium
- custom field suite project field suite, matt gibbs custom field suite +1 moreCustom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]CVE-2024-35596.4 Medium
- custom field suite project field suite, matt gibbs custom field suite +1 moreCustom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-30684.4 Medium
- custom field suite project field suite, mgibbs189 custom field suite +1 moreCustom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-06894.4 Medium
- custom field suite project field suite, matt gibbs custom field suite +1 moreWordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-325155.9 Medium
- custom field suite project field suiteThe Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.CVE-2019-118715.4 Medium