Get Custom Field Values Security Vulnerabilities and Issues — Get Custom Field Values CVE List

Lucene search

Get Custom Field Values ProjectGet Custom Field Values

2 matches found

CVE•added 2021/12/13 11:15 a.m.•32 views

CVE-2021-24871

The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

5.4CVSS5.3AI score0.00295EPSS

CVE•added 2021/12/13 11:15 a.m.•29 views

CVE-2021-24872

The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata without validating the permissions. Eg. contributors can access admin posts metadata.

6.5CVSS6.3AI score0.00545EPSS