Skip to contentUnknown Advanced Custom Fields: Extended vulnerabilities
- acf extended advanced custom fields: extended proAdvanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field TypeCVE-2026-1205349.8 Critical
- hwk-fr advanced custom fields: extended, unknown advanced custom fields: extended pro +1 moreAdvanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success MessageCVE-2026-942634.8 Medium
- hwk-fr advanced custom fields: extended, unknown advanced custom fields: extended pro +1 moreAdvanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update ActionCVE-2026-942688.1 High
- hwk-fr advanced custom fields: extended, unknown advanced custom fields: extended pro +1 moreAdvanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update ActionCVE-2026-942679.0 Critical
- hwk-fr advanced custom fields: extended, unknown advanced custom fields: extended pro +1 moreAdvanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode AttributesCVE-2026-942646.8 Medium
- hwk-fr advanced custom fields: extended, unknown advanced custom fields: extended pro +1 moreAdvanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update ActionCVE-2026-942628.1 High
- hwk-fr advanced custom fields: extendedAdvanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert ActionCVE-2026-80467Public exploit8.1 High
- hwk-fr advanced custom fields: extendedAdvanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update ActionCVE-2026-125268.1 High
- hwk-fr advanced custom fields: extended, acf-extended advanced custom fields\ +1 moreAdvanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL InjectionCVE-2021-248657.2 High