📦 Custom Field Suite

by Custom Field Suite Project

🔍 What is Custom Field Suite?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-3561

HIGH CVSS 8.8 Jun 20, 2024

The Custom Field Suite WordPress plugin contains a SQL injection vulnerability in the 'Term' custom field. Authenticated attackers with contributor-level access or higher can exploit this to extract s...

CVE-2024-3558

MEDIUM CVSS 6.4 Jun 20, 2024

The Custom Field Suite WordPress plugin versions up to 2.6.7 contain a stored cross-site scripting vulnerability in the 'cfs[post_title]' parameter. This allows authenticated attackers with contributo...

CVE-2024-3559

MEDIUM CVSS 6.4 Jun 12, 2024

The Custom Field Suite WordPress plugin up to version 2.6.7 has a stored XSS vulnerability in the 'cfs[post_content]' parameter. Authenticated attackers with contributor-level access or higher can inj...