All 7 CVE vulnerabilities found in Custom Field Suite, with AI-generated Chinese analysis, references, and POCs.
Vendor: Matt Gibbs
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-3562 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field CWE-95 | 8.8 | High | 2024-06-20 |
| CVE-2024-3561 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field CWE-89 | 8.8 | High | 2024-06-20 |
| CVE-2024-3558 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title] CWE-79 | 6.4 | Medium | 2024-06-20 |
| CVE-2024-3559 | Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content] CWE-79 | 6.4 | Medium | 2024-06-12 |
| CVE-2024-3068 | Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 | 4.4 | Medium | 2024-05-09 |
| CVE-2024-0689 | Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 | 4.4 | Medium | 2024-02-29 |
| CVE-2023-32515 | WordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS) CWE-79 | 5.9 | Medium | 2023-05-18 |
All 7 known CVE vulnerabilities affecting Custom Field Suite with full Chinese analysis, references, and POCs where available.