Vendors / Justin Kruit Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Justin Kruit records in CISA KEV No Justin Kruit vulnerabilities are listed in CISA KEV.
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kruit Advanced Custom Fields: Font Awesome Field allows Stored XSS.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00182 · Published 2026-05-27 · No fix listed CWE-79
Priority LOW 28
The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.0.2.
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00274 · Published 2026-05-15 · No fix listed CWE-79
Priority LOW 20
Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2026-08-06 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 0 3 0 0
