Magicfields

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Magicfields records in CISA KEV

No Magicfields vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2017-13784 CVE-2017-18611 · GHSA-792c-fhxf-x9jx

LOW 30

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2019-09-10 No fix listed CWE-79

TI-2017-13783 CVE-2017-18610 · GHSA-49xh-hg4f-jcq3

LOW 30

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2019-09-10 No fix listed CWE-79

TI-2017-13782 CVE-2017-18609 · GHSA-v2xv-px5j-7x7v

LOW 30

The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2019-09-10 No fix listed CWE-79