WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-field-for-wp-job-manager
Published
2023-07-13
Title
Custom Field For WP Job Manager < 1.2 - Admin+ Stored XSS
Slug
custom-field-for-wp-job-manager
Published
2024-08-15
Title
Custom Field For WP Job Manager < 1.3 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode
Slug
custom-field-for-wp-job-manager
Published
2025-01-06
Title
Custom Field For WP Job Manager < 1.4 - Reflected Cross-Site Scripting
Slug
custom-field-for-wp-job-manager
Published
2025-03-27
Title
Custom Field For WP Job Manager < 1.5 - Cross-Site Request Forgery
Slug
custom-field-list-widget
Published
2025-03-17
Title
Custom Field List Widget <= 1.5.1 - Unauthenticated Local File Inclusion
Slug
custom-field-manager
Published
2024-11-22
Title
Custom Field Manager <= 1.0 - Reflected XSS Vulnerability
Slug
custom-field-suite
Published
2015-03-12
Title
Custom Field Suite <= 2.4 - Insufficient Authorisation
Slug
custom-field-suite
Published
2019-05-08
Title
Custom Field Suite <= 2.5.14 - Authenticated Cross-Site Scripting (XSS)
Slug
custom-field-suite
Published
2023-05-10
Title
Custom Field Suite < 2.6.3 - Admin+ Stored XSS
Slug
custom-field-suite
Published
2024-02-28
Title
Custom Field Suite < 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
custom-field-suite
Published
2024-05-07
Title
Custom Field Suite < 2.6.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
custom-field-suite
Published
2024-06-11
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]
Slug
custom-field-suite
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]
Slug
custom-field-suite
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
Slug
custom-field-suite
Published
2024-06-19
Title
Custom Field Suite <= 2.6.7 - Contributor+ PHP Code Injection via Loop Custom Field
Slug
custom-field-template
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
custom-field-template
Published
2022-12-09
Title
Custom Field Template < 2.5.8 - Admin+ PHP Object Injection
Slug
custom-field-template
Published
2020-09-16
Title
Custom Field Template < 2.5.2 - Cross-Site Request Forgery
Slug
custom-field-template
Published
2023-07-10
Title
Custom Field Template < 2.5.9 - Cross-Site Request Forgery
Slug
custom-field-template
Published
2023-07-24
Title
Custom Field Template < 2.6 - Reflected Cross-Site Scripting
Slug
custom-field-template
Published
2024-02-14
Title
Custom Field Template < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via $search_label
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Contributor+) Information Exposure
Slug
custom-field-template
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated (Admin+) Stored Cross-Site Scritping