VendorsWpgogocustom_field_templateall versions
Vulnerabilities

Wpgogo Custom Field Template

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2023-22695
WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-07-10 · Modified
8.8EPSS 0.003
CVE-2022-4324
Custom Field Template < 2.5.8 - Admin+ PHP Object Injection
Published 2023-01-02 · Modified
7.2EPSS 0.177
CVE-2023-38392
WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)
Published 2023-08-07 · Modified
7.1EPSS 0.004
CVE-2024-44062
WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability
Published 2024-09-15 · Analyzed
6.5EPSS 0.003
CVE-2024-0627
Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name
Published 2024-06-11 · Modified
6.4EPSS 0.003
CVE-2023-6745
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Published 2024-06-11 · Modified
6.4EPSS 0.003
CVE-2024-0653
Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping
Published 2024-06-11 · Modified
4.8EPSS 0.002
CVE-2020-36742
Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass
Published 2023-07-01 · Modified
4.3EPSS 0.004
CVE-2023-6748
Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure
Published 2024-06-11 · Modified
4.3EPSS 0.003