WordPress plugin
custom-metas security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All custom-metas vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
custom-metas: common questions
Does custom-metas have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in custom-metas: 1 medium. At least one is not fixed in the latest version.
How do I check which version of custom-metas I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent custom-metas vulnerability?
3f5413be-76b8-457c-9236-3ef760f46d40, published Apr 17, 2016: Custom Metas <= 1.5.1 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any custom-metas vulnerability listed in CISA KEV?
No. None of the known custom-metas vulnerabilities is currently listed in the CISA KEV catalog.