Magic Fields

Magic Fields has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2019; all 3 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10. 2019 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

Every one of the 3 issues recorded for Magic Fields has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Burak Kelebek.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Magic Fields vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2017-18611

Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter

Read the full analysis

Vulnerability Records

3 records


2019-09-10 00:00	Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-field-css parameter Magic Fields <= 1.7.1	`CVE-2017-18611`	6.1 Medium	Burak Kelebek	Yes
2019-09-10 00:00	Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via custom-write-panel-id Parameter Magic Fields <= 1.7.1	`CVE-2017-18609`	6.1 Medium	Burak Kelebek	Yes
2019-09-10 00:00	Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter Magic Fields <= 1.7.1	`CVE-2017-18610`	6.1 Medium	Burak Kelebek	Yes

Showing 1–3 of 3 reports