VendorsCustom Field Suite Projectcustom_field_suiteany version
Vulnerabilities

Custom Field Suite Project Custom Field Suite any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2024-3562
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field
Published 2024-06-20 · Modified
8.8EPSS 0.006
CVE-2024-3561
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field
Published 2024-06-20 · Modified
8.8EPSS 0.005
CVE-2024-3558
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]
Published 2024-06-20 · Modified
6.4EPSS 0.004
CVE-2024-3559
Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]
Published 2024-06-12 · Modified
6.4EPSS 0.003
CVE-2023-32515
WordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS)
Published 2023-05-18 · Modified
5.9EPSS 0.004
CVE-2019-11871
The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.
Published 2019-05-10 · Modified
5.4EPSS 0.009
CVE-2024-3068
Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Published 2024-05-09 · Modified
4.8EPSS 0.006
CVE-2024-0689
Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Published 2024-02-29 · Modified
4.8EPSS 0.003