Webhammer Wp Custom Fields Search — known CVE vulnerabilities

Every CVE whose affected-product data names Webhammer Wp Custom Fields Search, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-8364 — CVSS 6.4 (medium): The WP Custom Fields Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcfs-preset shortcode in…
• CVE-2017-9419 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28 for WordPress allows remote attackers to…
• CVE-2022-47157 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <= 1.2.34 versions.