Extension WordPress
Vulnérabilités Custom post types, Custom Fields & more
Cette page rassemble les failles publiées pour Custom post types, Custom Fields & more, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Custom post types, Custom Fields & more
3 fiches
Custom post types, Custom Fields & more <= 5.0.4 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Custom post types, Custom Fields & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode and custom post meta in all versions up to, and including, 5.0.4 due to insufficient input sanitization…
*-5.0.4
5.0.5
04/04/2024
Custom post types <= 4.0.12 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Custom post types, Custom Fields & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to 5.0.0 (exclusive) due to insufficient input sanitization and output escaping. This makes it…
[*, 5.0.0)
5.0.0
07/11/2023
Custom post types <= 5.0.2 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Custom post types, Custom Fields & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping. This makes…
*-5.0.2
5.0.3
16/10/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.