CF
Product
Custom Field Suite
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 6Low 0
Watch
Add Custom Field Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3558 | 5.4 | Jun 20 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title] Affected: through 2.6.7 |
| CVE-2024-3559 | 5.4 | Jun 12 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content] Affected: through 2.6.7 |
| CVE-2019-11871 | 5.4 | May 10 | The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins Affected: before 2.5.15 |
| CVE-2024-3068 | 4.8 | May 9 | Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: before 2.6.6 |
| CVE-2024-0689 | 4.8 | Feb 29 | The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a meta import in all versions up to, and including, 2.6.4 due to insufficient input… Affected: before 2.6.5 |
| CVE-2023-32515 | 4.8 | May 18 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matt Gibbs Custom Field Suite plugin <= 2.6.2.1 versions Affected: before 2.6.3 |
Showing 6