VanquishUser Extra Fields*
2 matches found
CVE-2024-10800
CVE-2024-10800 : WordPress User Extra Fields plugin (
8.8CVSS8.7AI score0.00811EPSS
Save
CVE-2024-11150
CVE-2024-11150 affects WordPress User Extra Fields (WordPress plugin). The issue is an unauthenticated arbitrary file deletion vulnerability caused by insufficient file path validation in delete_tmp_uploaded_file() across all versions up to and including 16.6. This could allow an unauthenticated ...
9.8CVSS9.8AI score0.01389EPSS
Save