Simple Fields

Simple Fields has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2026; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), PHP Remote File Inclusion.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2019.

All of these findings were reported by Graeme Robinson.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all Simple Fields vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1CVE-2018-25324

Simple Fields <= 0.3.5 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

4 records


2026-05-17 00:00	Simple Fields <= 0.3.5 - Unauthenticated Local File Inclusion Simple Fields <= 0.3.5	`CVE-2018-25324`	8.1 High	Graeme Robinson	No
2019-09-24 00:00	Simple Fields <= 1.4.11 - Cross-Site Scripting Simple Fields <= 1.4.11	`N/A`	7.2 High	Anonymous	No
2015-08-25 00:00	Simple Fields <= 1.4.10 - Reflected Cross-Site Scripting Simple Fields < 1.4.11	`CVE-2015-9302`	6.1 Medium	Anonymous	Yes
2013-04-01 00:00	Simple Fields < 1.2 - Cross-Site Request Forgery Simple Fields < 1.2	`CVE-2013-7476`	8.8 High	Anonymous	Yes

Showing 1–4 of 4 reports