Skip to content
OpenAdvisories

Product · TotalPress.org

Custom post types, Custom Fields & more

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2023-6993

    Custom post types, Custom Fields & more <= 5.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Custom post types, Custom Fields & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode and custom post meta in all versions up to, and including, 5.0.4 due to insufficient input sanitization and output escapin…

    TotalPress.org Custom post types, Custom Fields & more Web / CMS
  • Medium 5.9
    CVE-2023-32116

    WordPress Custom post types Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in TotalPress.Org Custom post types, Custom Fields & more plugin <= 4.0.12 versions.

    TotalPress.org Custom post types, Custom Fields & more