Custom Field Suite Project vulnerabilities
We track 2 vulnerabilities in Custom Field Suite Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Custom Field Suite Project vulnerabilities
- 8.8 High severity
Custom Field Suite: Improper Control of Generation of Code
The Custom Field Suite plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.6.7 via the Loop custom field. This is due to insufficient sanitization of input prior to being used in a call to the eval() function. This
- 8.8 High severity
Custom Field Suite: Improper Neutralization of Special Elements used in an SQL Command
The Custom Field Suite plugin for WordPress is vulnerable to SQL Injection via the the 'Term' custom field in all versions up to, and including, 2.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin