Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WC Fields Factory 4.1.11 Clear all filters
TI-2026-63003 CVE-2026-93508 · GHSA-fmf3-2pcf-wpmg

WC Fields Factory < 4.1.11 - Subscriber+ Arbitrary Post Meta Manipulation via AJAX

Priority MEDIUM 41

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with Subscriber-level access and above to create, modify and delete…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00207 Published 2026-09-23 Fixed in 4.1.11 CWE-862
TI-2026-63002 CVE-2026-93507 · GHSA-225c-7qjr-pm2w

WC Fields Factory < 4.1.11 - Contributor+ Arbitrary Post Cloning and Private Content Disclosure

Priority LOW 15

The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above to duplicate arbitrary posts of any type…

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00208 Published 2026-09-23 Fixed in 4.1.11 CWE-862