Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 8.8 CVE-2024-3562 The Custom Field Suite plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.6.7 via the Loop custom field…

Custom Field Suite after 2.6.7 Fix from $1,9502024-06-20 HIGH 8.8 CVE-2024-3561 The Custom Field Suite plugin for WordPress is vulnerable to SQL Injection via the the 'Term' custom field in all versions up to, and including, 2.6.…

Custom Field Suite after 2.6.7 Fix from $1,9502024-06-20 MEDIUM 5.4 CVE-2024-3558 The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the 'cfs[post_title]' parameter versions up to, and …

Custom Field Suite after 2.6.7 Fix from $1,6002024-06-20 MEDIUM 5.4 CVE-2024-3559 The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the 'cfs[post_content]' parameter versions up to, an…

Custom Field Suite after 2.6.7 Fix from $1,6002024-06-12 MEDIUM 5.4 CVE-2019-11871 The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.

Custom Field Suite 2.5.15+ Fix from $1,6002019-05-10