Comments Extra Fields For Post,Pages and CPT
Comments Extra Fields For Post,Pages and CPT has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 4.7, and the most serious one scores 5.5 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
Every one of the 3 issues recorded for Comments Extra Fields For Post,Pages and CPT has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (2) reported by Francesco Carlucci. Comments Extra Fields For Post,Pages and CPT is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2022-2398WordPress Comments Fields <= 4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Comments Extra Fields For Post,Pages and CPT
Author
N-Media
This plugin allow admin to add custom fields in comment area. These fields are saved as comment meta and is displayed under comment text. Four fields types are supported. Live Demo Create Fields Features Drag and Drop fields Text,Radio, Radio and Select inputs Attach unlimited comments fields Compatible with all themes Pro Features – 16 Input Types Pro Inputs Email Date Timezone File Input Image Picker Color Picker Color Palttes Hidden Input Dividers 4 styles HTML Content Disable extra field on frontend via setting. Only admin can see in comment admin. Max file upload limit set Custom Post Types Support View & Edit Comments Admin Buy PRO Version
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C