Skip to contentTassos.gr Advanced Custom Fields vulnerabilities
- tassos.gr advanced custom fields extension for joomla, smile pack extension for joomla +1 moreJoomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension 2.8.13-2.8.15, 3.1.4-3.1.8 and Smile Pack 1.2.7-1.2.9, 2.1.2-2.1.6CVE-2026-1154516.9 Medium
- tassos.gr advanced custom fields extension for joomla, smile pack extension for joomla +1 moreJoomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack 1.1.2-1.2.9, 2.0.0-2.1.6CVE-2026-1154527.5 High
- tassos framework, advanced custom fields, convert forms +7 more +9 moreExtension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for JoomlaCVE-2026-489069.3 Critical
- tassos.gr advanced custom fields, convert forms, engagebox +3 more +5 moreExtension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for JoomlaCVE-2026-21627Public exploit9.5 Critical
- tassos.gr advanced custom fieldsAn HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4...CVE-2025-549404.6 Medium
- tassos.gr advanced custom fields, unknown advanced custom fields pro +1 moreCross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier...CVE-2024-454296.1 Medium
- advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 moreCross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced...CVE-2023-400685.4 Medium
- advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 moreWordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)CVE-2023-30777Public exploitEPSS 39.0%7.1 High
- advancedcustomfields advanced custom fields, todo advanced custom fields pro +1 moreAdvanced Custom Fields 5.0-5.12.2 - Unauthenticated File UploadCVE-2022-25948.8 High
- advancedcustomfields advanced custom fieldsMissing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and...CVE-2022-231836.5 Medium