Vulnerabilities

TI-2024-07756 CVE-2024-8364 · GHSA-gf25-7639-xv95

WP Custom Fields Search <= 1.2.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcfs-preset Shortcode

LOW 29

The WP Custom Fields Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcfs-preset shortcode in all versions up to, and including, 1.2.35 due to insufficient input sanitization an…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00375 Published 2024-09-19 No fix listed CWE-79

TI-2022-23361 CVE-2022-47157 · GHSA-g5qq-v497-hw7f

WordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-05-18 No fix listed CWE-79

TI-2017-06833 CVE-2017-9419 · GHSA-2hff-q8hc-g254

Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin…

LOW 29

Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to inject arbitrary JavaScript via the cs-all-0 parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01122 Published 2017-06-15 No fix listed CWE-79

Vulnerabilities

Filters

WP Custom Fields Search <= 1.2.35 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpcfs-preset Shortcode

WordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)

Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin…