mgibbs189

Products

ProductCVEsExploitedLatest
Custom Field Suite6–Jun 20, 2024
Log HTTP Requests1–Oct 28, 2022

Exploited and recent CVEs

  • CVE-2024-3562 High 8.8 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field 0.6%
  • CVE-2024-3561 High 8.8 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field 0.5%
  • CVE-2024-3558 Medium 6.4 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title] 0.4%
  • CVE-2024-3559 Medium 6.4 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content] 0.3%
  • CVE-2024-3068 Medium 4.4 Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting 0.6%
  • CVE-2024-0689 Medium 4.4 Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%
  • CVE-2022-3402 Medium 6.1 Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting 0.8%