CF
Vendor
Custom Field Suite Project
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-3562 | CF Custom Field Suite Custom Field Suite Project | 8.8 | Jun 20 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field |
| CVE-2024-3561 | CF Custom Field Suite Custom Field Suite Project | 8.8 | Jun 20 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field |
| CVE-2024-3558 | CF Custom Field Suite Custom Field Suite Project | 5.4 | Jun 20 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title] |
| CVE-2024-3559 | CF Custom Field Suite Custom Field Suite Project | 5.4 | Jun 12 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content] |
| CVE-2024-3068 | CF Custom Field Suite Custom Field Suite Project | 4.8 | May 9 | Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2024-0689 | CF Custom Field Suite Custom Field Suite Project | 4.8 | Feb 29 | The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a meta import in all versions up to, and including, 2.6.4 due to insufficient input… |
| CVE-2023-32515 | CF Custom Field Suite Custom Field Suite Project | 4.8 | May 18 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matt Gibbs Custom Field Suite plugin <= 2.6.2.1 versions |
| CVE-2019-11871 | CF Custom Field Suite Custom Field Suite Project | 5.4 | May 10 | The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins |