Known Vulnerabilities for Wordpress Custom Settings by Wordpress Custom Settings Project
Listed below are 1 of the newest known vulnerabilities associated with "Wordpress Custom Settings" by "Wordpress Custom Settings Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-11358 json | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-10100 json | The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields ... | Not Provided | 2026-06-02 | 2026-06-02 |
| CVE-2026-9724 json | The MotorDesk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. T... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-8939 json | The Search Simple Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-8681 json | The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1... | Not Provided | 2026-05-16 | 2026-05-16 |
| CVE-2026-5192 json | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversa... | Not Provided | 2026-05-05 | 2026-05-05 |
| CVE-2023-23806 json | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davinder Singh Custom Settings plugin <= 1.0 versions. | 4.8 - MEDIUM | 2023-04-23 | 2023-04-28 |