WordPress plugin
Display custom fields in the frontend – Post and User Profile Fields security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All Display custom fields in the frontend – Post and User Profile Fields vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure ≤1.2.1Update to 1.3.0 | CVE-2023-6983 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_data ≤1.2.1Update to 1.3.0 | CVE-2023-6982 | |
| High8.8 | Authenticated (Contributor+) Code Injection ≤1.2.1Update to 1.3.0 | CVE-2023-6996 | |
| Medium6.5 | Missing Authorization via vg_display_data shortcode ≤1.2.0Update to 1.2.1 | CVE-2023-31073 |
- Medium4.3Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure
≤1.2.1Update to 1.3.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_data
≤1.2.1Update to 1.3.0
- High8.8Authenticated (Contributor+) Code Injection
≤1.2.1Update to 1.3.0
- Medium6.5Missing Authorization via vg_display_data shortcode
≤1.2.0Update to 1.2.1
Display custom fields in the frontend – Post and User Profile Fields: common questions
Does Display custom fields in the frontend – Post and User Profile Fields have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Display custom fields in the frontend – Post and User Profile Fields: 1 high, 3 medium. None are known to affect version null.
How do I check which version of Display custom fields in the frontend – Post and User Profile Fields I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Display custom fields in the frontend – Post and User Profile Fields vulnerability?
CVE-2023-6983, published Jan 16, 2024: Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure. Severity: Medium (CVSS 4.3).
Is any Display custom fields in the frontend – Post and User Profile Fields vulnerability listed in CISA KEV?
No. None of the known Display custom fields in the frontend – Post and User Profile Fields vulnerabilities is currently listed in the CISA KEV catalog.