Access violation vulnerability in Just Custom Fields 3.3.2

The Just Custom Fields plugin for WordPress has a security issue that allows unauthorized users to access certain features without proper permission checks. This vulnerability affects all versions up to and including 3.3.2. This means that attackers who have at least Subscriber level access can use these features that are meant for admin users. This allows them to control field groups and change visibility of items.

Detected in:

Just Custom Fields open vulnerable versions: >= * <= 3.3.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.