Login Request a demo
CF
Product
Custom Field Template
by Wpgogo · last CVE Sep 15, 2024
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 2Medium 7Low 0
Severity
All severities9Critical0High2Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Custom Field Template to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-38392
6.1
0%
Aug 7
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 versions
Affected: before 2.6.0
CVE-2024-44062
5.4
0%
Sep 15
WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability
Affected: before 2.6.6
CVE-2024-0627
5.4
0%
Jun 11
The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom field name column in all versions up to, and including, 2.6.1…
Affected: before 2.6.2
CVE-2023-6745
5.4
0%
Jun 11
The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cpt' shortcode in all versions up to, and including, 2.6.1 due to…
Affected: before 2.6.2
CVE-2024-0653
4.8
0%
Jun 11
The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6.1 due to insufficient…
Affected: before 2.6.2
CVE-2023-6748
4.3
0%
Jun 11
The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortcode
Affected: before 2.6.2
CVE-2020-36742
4.3
0%
Jul 1
The Custom Field Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.1
Affected: through 2.5.1
Showing 7