Skip to content
OpenAdvisories

Vendor

Jose Vega

8 known vulnerabilities.

Products

Display custom fields in the frontend – Post and User Profile Fields 4 WP Required Taxonomies – Categories and Tags Mandatory 1 WP Frontend Admin 1 WooCommerce Bulk Edit Products – WP Sheet Editor 1 WP Page Templates 1 Disable Payment Methods based on cart conditions for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-6996

    Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection

    The Display custom fields in the frontend – Post and User Profile Fields plugin for WordPress is vulnerable to Code Injection via the plugin's vg_display_data shortcode in all versions up to, and including, 1.2.1 due to insufficient input validation and restr…

    Jose Vega Display custom fields in the frontend – Post and User Profile Fields Web / CMS