Plugin icon

Custom Field Suite

custom-field-suite
Plugin closed

Vulnerabilities:

9

Last Updated:

May 13, 2024

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
Fixed in
No known fix
CVSS
8.8 (high)
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Contributor+ PHP Code Injection via Loop Custom Field
Fixed in
No known fix
CVSS
7.2 (high)
Published
2024-06-11
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2024-05-07
Title
Custom Field Suite < 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.6
CVSS
4.4 (medium)
Published
2024-02-28
Title
Custom Field Suite < 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.5
CVSS
4.4 (medium)
Published
2023-05-10
Title
Custom Field Suite < 2.6.3 - Admin+ Stored XSS
Fixed in
Fixed in 2.6.3
CVSS
3.5 (low)
Published
2019-05-08
Title
Custom Field Suite <= 2.5.14 - Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.5.15
CVSS
5.4 (medium)
Published
2015-03-12
Title
Custom Field Suite <= 2.4 - Insufficient Authorisation
Fixed in
Fixed in 2.4.1
CVSS
n/a