CVE-2025-67991: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Reflected XSS.This issue affects User Extra Fields: from n/a through = 16.8...

CVE-2025-69376: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Path Traversal.This issue affects User Extra Fields: from n/a through = 17.0...

PT-2025-49953

Name of the Vulnerable Software and Affected Versions vanquish User Extra Fields versions prior to 16.9 Description An authorization issue exists in vanquish User Extra Fields wp-user-extra-fields, allowing exploitation due to incorrectly configured access control security levels. The issue relat...

CVE-2025-67579: Missing Authorization

Missing Authorization vulnerability in vanquish User Extra Fields wp-user-extra-fields allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Extra Fields: from n/a through = 16.8...