Skip to content
Advancedcustomfields vulnerabilities
Newest
-
advancedcustomfields advanced custom fields, unknown advanced custom fields pro, secure custom fields +1 more +3 more
Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution
CVE-2024-9529
6.6 Medium
-
advancedcustomfields advanced custom fields, unknown advanced custom fields (acf), advanced custom fields pro +1 more +3 more
Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access
CVE-2024-4565
6.5 Medium
-
advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more
Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability
CVE-2024-34761
8.5 High
-
advancedcustomfields advanced custom fields, delicious brains advanced custom fields pro, wpengine advanced custom fields (acf®) +2 more
Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
CVE-2023-6701
6.4 Medium
-
advancedcustomfields advanced custom fields, unknown advanced custom fields (acf) +1 more
WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure
CVE-2022-40696
3.7 Low
-
advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more
Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced...
CVE-2023-40068
5.4 Medium
-
advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more
WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)
CVE-2023-30777
Public exploit
EPSS 39.0%
7.1 High
-
advancedcustomfields advanced custom fields, unknown advanced custom fields (acf), advanced custom fields (acf) pro +2 more
Advanced Custom Fields - Contributor+ PHP Object Injection
CVE-2023-1196
8.8 High
-
advancedcustomfields advanced custom fields, todo advanced custom fields pro +1 more
Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload
CVE-2022-2594
8.8 High
-
advancedcustomfields advanced custom fields
Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and...
CVE-2022-23183
6.5 Medium
-
advancedcustomfields advanced custom fields, delicious brains advanced custom fields and advanced custom fields pro +1 more
Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5...
CVE-2021-20867
6.5 Medium
-
advancedcustomfields advanced custom fields, delicious brains advanced custom fields and advanced custom fields pro +1 more
Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5...
CVE-2021-20866
6.5 Medium
-
advancedcustomfields advanced custom fields, delicious brains advanced custom fields and advanced custom fields pro +1 more
Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5...
CVE-2021-20865
7.5 High
-
advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more
Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)
CVE-2021-24241
6.1 Medium
-
advancedcustomfields advanced custom fields
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings...
CVE-2020-36172
6.1 Medium
-
advancedcustomfields acf fronted display
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an...
CVE-2015-9479
9.8 Critical
-
advancedcustomfields advanced custom fields
The advanced-custom-fields plugin before 5.7.8 for WordPress has XSS by authors.
CVE-2018-20986
5.4 Medium