Advancedcustomfields Advanced Custom Fields vulnerabilities

• advancedcustomfields advanced custom fields, unknown advanced custom fields pro, secure custom fields +1 more +3 more Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution CVE-2024-9529 6.6 MediumNovember 15, 2024
• advancedcustomfields advanced custom fields, unknown advanced custom fields (acf), advanced custom fields pro +1 more +3 more Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access CVE-2024-4565 6.5 MediumJune 20, 2024
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability CVE-2024-34761 8.5 HighJune 10, 2024
• advancedcustomfields advanced custom fields, delicious brains advanced custom fields pro, wpengine advanced custom fields (acf®) +2 more Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field CVE-2023-6701 6.4 MediumFebruary 5, 2024
• advancedcustomfields advanced custom fields, unknown advanced custom fields (acf) +1 more WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure CVE-2022-40696 3.7 LowJanuary 8, 2024
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced... CVE-2023-40068 5.4 MediumAugust 21, 2023
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS) CVE-2023-30777 Public exploit EPSS 39.0% 7.1 HighMay 10, 2023
• advancedcustomfields advanced custom fields, unknown advanced custom fields (acf), advanced custom fields (acf) pro +2 more Advanced Custom Fields - Contributor+ PHP Object Injection CVE-2023-1196 8.8 HighMay 2, 2023
• advancedcustomfields advanced custom fields, todo advanced custom fields pro +1 more Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload CVE-2022-2594 8.8 HighAugust 22, 2022
• advancedcustomfields advanced custom fields Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and... CVE-2022-23183 6.5 MediumMarch 31, 2022
• advancedcustomfields advanced custom fields, delicious brains advanced custom fields and advanced custom fields pro +1 more Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5... CVE-2021-20867 6.5 MediumDecember 13, 2021
• advancedcustomfields advanced custom fields, delicious brains advanced custom fields and advanced custom fields pro +1 more Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5... CVE-2021-20866 6.5 MediumDecember 13, 2021
• advancedcustomfields advanced custom fields, delicious brains advanced custom fields and advanced custom fields pro +1 more Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5... CVE-2021-20865 7.5 HighDecember 13, 2021
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS) CVE-2021-24241 6.1 MediumApril 22, 2021
• advancedcustomfields advanced custom fields The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings... CVE-2020-36172 6.1 MediumJanuary 6, 2021
• advancedcustomfields advanced custom fields The advanced-custom-fields plugin before 5.7.8 for WordPress has XSS by authors. CVE-2018-20986 5.4 MediumAugust 22, 2019