Skip to content
OpenAdvisories

Vendor

aprokopenko

2 known vulnerabilities.

Products

Just Custom Fields 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-6168

    Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery via AJAX actions

    The Just Custom Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on several AJAX function. This makes it possible for unauthenticated atta…

    aprokopenko Just Custom Fields Web / CMS
  • Medium 4.3
    CVE-2024-6167

    Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions

    The Just Custom Fields plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several AJAX functions in all versions up to, and including, 3.3.2. This makes it possible for authenticated attackers, with…

    aprokopenko Just Custom Fields Web / CMS