custom_field_suite vulnerabilities

2 known vulnerabilities in custom_field_suite from Custom Field Suite Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Custom Field Suite: Improper Control of Generation of Code

  CVE-2024-3562Jun 20, 2024Mgibbs189

  The Custom Field Suite plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.6.7 via the Loop custom field. This is due to insufficient sanitization of input prior to being used in a call to the eval() function. This

• 8.8 High severity

  Custom Field Suite: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-3561Jun 20, 2024Mgibbs189

  The Custom Field Suite plugin for WordPress is vulnerable to SQL Injection via the the 'Term' custom field in all versions up to, and including, 2.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin