Is Sydney Toolbox safe?

Plugin details

• Slug: sydney-toolbox
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

• Sydney Toolbox [sydney-toolbox] < 1.26 [CVE-2024-1447, Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting, WordPress Sydney Toolbox Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS), Sydney Toolbox &lt; 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting]
• Sydney Toolbox [sydney-toolbox] < 1.27 [CVE-2024-2936, Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id, WordPress Sydney Toolbox Plugin <= 1.26 is vulnerable to Cross Site Scripting (XSS), Sydney Toolbox &lt; 1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id]
• Sydney Toolbox [sydney-toolbox] < 1.29 [CVE-2024-3208, Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery, WordPress Sydney Toolbox Plugin <= 1.28 is vulnerable to Cross Site Scripting (XSS)]
• Sydney Toolbox [sydney-toolbox] < 1.31 [CVE-2024-4036, Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting, WordPress Sydney Toolbox Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)]
• Sydney Toolbox [sydney-toolbox] < 1.32 [CVE-2024-4473, Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget, WordPress Sydney Toolbox Plugin <= 1.31 is vulnerable to Cross Site Scripting (XSS)]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• Advanced Custom Fields (ACF®) — 2000000+ active installs — max PHP 8.4
• Custom Post Type UI — 1000000+ active installs — max PHP 8.4
• Meta Box — 500000+ active installs — max PHP 8.4
• Checkout Field Editor (Checkout Manager) for WooCommerce — 400000+ active installs — max PHP 8.4
• Admin Columns — 100000+ active installs