Skip to content
Noroxi

Custom Field Suite

custom-field-suite · plugin

Known security vulnerabilities for Custom Field Suite. Find out in seconds which version runs on your site with WP Lens.

7 known vulnerabilities

latest Jun 19, 2024

Vulnerabilities

  • CVE-2024-3561

    Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field

    High 8.8

  • CVE-2024-3558

    Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]

    Medium 5.4

  • CVE-2024-3559

    Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content]

    Medium 5.4

  • CVE-2019-11871

    The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.

    Medium 5.4

  • CVE-2024-3068

    Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting

    Medium 4.8

  • CVE-2024-0689

    Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting

    Medium 4.8

  • CVE-2023-32515

    WordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS)

    Medium 4.8

← Back to directory