mgibbs189
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Custom Field Suite | 6 | – | Jun 20, 2024 |
| Log HTTP Requests | 1 | – | Oct 28, 2022 |
Exploited and recent CVEs
- CVE-2024-3562 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field 0.6%
- CVE-2024-3561 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) SQL Injection via Term Custom Field 0.5%
- CVE-2024-3558 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title] 0.4%
- CVE-2024-3559 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_content] 0.3%
- CVE-2024-3068 Custom Field Suite <= 2.6.5 - Authenticated (Admin+) Stored Cross-Site Scripting 0.6%
- CVE-2024-0689 Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%
- CVE-2022-3402 Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting 0.8%