JO
Vendor
josevega
6
CVEs
0
On KEV
0
New 30D
Products
DC8.8
Display custom fields in the frontend – Post and User Profile Fields
josevega
3 CVEs0 on KEV0 new
DP6.1
Disable Payment Methods based on cart conditions for WooCommerce
josevega
1 CVEs0 on KEV0 new
WP6.1
WP Page Templates
josevega
1 CVEs0 on KEV0 new
WR6.3
WP Required Taxonomies – Categories and Tags Mandatory
josevega
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13362 | WP WP Page Templates josevega | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2022-4974 | WR WP Required Taxonomies – Categories and Tags Mandatory josevega | 6.3 | Oct 16 | Freemius SDK <= 2.4.2 - Missing Authorization Checks |
| CVE-2023-6996 | DC Display custom fields in the frontend – Post and User Profile Fields josevega | 8.8 | Feb 5 | Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection |
| CVE-2023-6982 | DC Display custom fields in the frontend – Post and User Profile Fields josevega | 5.4 | Feb 5 | Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_data |
| CVE-2023-6983 | DC Display custom fields in the frontend – Post and User Profile Fields josevega | 4.3 | Feb 5 | Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure |