Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Display custom fields in the frontend – Post and User Profile Fields — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Display custom fields in the frontend – Post and User Profile Fields, with AI-generated Chinese analysis, references, and POCs.

Vendor: josevega

CVE IDTitleCVSSSeverityPublished
CVE-2023-31073 WordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability CWE-862 4.3 Medium2024-12-09
CVE-2023-6996 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection CWE-94 8.8 High2024-02-05
CVE-2023-6982 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_data CWE-79 6.4 Medium2024-02-05
CVE-2023-6983 Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure CWE-639 4.3 Medium2024-02-05

All 4 known CVE vulnerabilities affecting Display custom fields in the frontend – Post and User Profile Fields with full Chinese analysis, references, and POCs where available.