Extension WordPress
Vulnérabilités Just Custom Fields
Cette page rassemble les failles publiées pour Just Custom Fields, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Just Custom Fields
4 fiches
Just Custom Fields <= 3.3.2 – Missing Authorization via AJAX actions
The Just Custom Fields plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several AJAX functions in all versions up to, and including, 3.3.2. This makes it possible for authenticated…
*-3.3.2
Non indiqué
08/07/2024
Just Custom Fields <= 3.3.2 – Cross-Site Request Forgery via AJAX actions
The Just Custom Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on several AJAX function. This makes it possible…
*-3.3.2
Non indiqué
08/07/2024
Just Custom Fields <= 3.3.2 – Missing Authorization on AJAX Actions
The Just Custom Fields plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on various AJAX actions in versions up to, and including, 3.3.2. This makes it possible for authenticated attackers,…
*-3.3.2
Non indiqué
19/10/2023
Just Custom Fields <= 3.3.2 – Cross-Site Request Forgery on AJAX Actions
The Just Custom Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on multiple AJAX actions. This makes it possible…
*-3.3.2
Non indiqué
19/10/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.