Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Custom Field Suite — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Custom Field Suite, with AI-generated Chinese analysis, references, and POCs.

Vendor: Matt Gibbs

CVE IDTitleCVSSSeverityPublished
CVE-2024-3562 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field CWE-95 8.8 High2024-06-20
CVE-2024-3561 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field CWE-89 8.8 High2024-06-20
CVE-2024-3558 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title] CWE-79 6.4 Medium2024-06-20
CVE-2024-3559 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content] CWE-79 6.4 Medium2024-06-12
CVE-2024-3068 Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 4.4 Medium2024-05-09
CVE-2024-0689 Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 4.4 Medium2024-02-29
CVE-2023-32515 WordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS) CWE-79 5.9 Medium2023-05-18

All 7 known CVE vulnerabilities affecting Custom Field Suite with full Chinese analysis, references, and POCs where available.