WP
Vendor
Wpgogo
11
CVEs
0
On KEV
0
New 30D
Products
CF8.8
Custom Field Template
Wpgogo
9 CVEs0 on KEV0 new
CP8.8
Custom Post Type Page Template
Wpgogo
1 CVEs0 on KEV0 new
LI5.4
Lightbox-gallery
Wpgogo
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-44062 | CF Custom Field Template Wpgogo | 5.4 | Sep 15 | WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-0653 | CF Custom Field Template Wpgogo | 4.8 | Jun 11 | The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6.1 due to insufficient… |
| CVE-2024-0627 | CF Custom Field Template Wpgogo | 5.4 | Jun 11 | The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom field name column in all versions up to, and including, 2.6.1… |
| CVE-2023-6748 | CF Custom Field Template Wpgogo | 4.3 | Jun 11 | The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortcode |
| CVE-2023-6745 | CF Custom Field Template Wpgogo | 5.4 | Jun 11 | The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cpt' shortcode in all versions up to, and including, 2.6.1 due to… |
| CVE-2023-50372 | CP Custom Post Type Page Template Wpgogo | 8.8 | Dec 18 | Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Post Type Page Template.This issue affects Custom Post Type Page Template: from n/a through 1.1 |
| CVE-2023-38392 | CF Custom Field Template Wpgogo | 6.1 | Aug 7 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 versions |
| CVE-2023-22695 | CF Custom Field Template Wpgogo | 8.8 | Jul 10 | Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.8 versions |
| CVE-2020-36742 | CF Custom Field Template Wpgogo | 4.3 | Jul 1 | The Custom Field Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.1 |
| CVE-2022-4682 | LI Lightbox-gallery Wpgogo | 5.4 | Feb 13 | The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is… |
| CVE-2022-4324 | CF Custom Field Template Wpgogo | 7.2 | Jan 2 | The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user… |