Wpengine Advanced Custom Fields (acf®) vulnerabilities
- unknown advanced custom fields (acf®)Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path2.7 Low
- unknown advanced custom fields (acf®)Advanced Custom Fields 6.2.0 - 6.8.10 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR2.7 Low
- unknown advanced custom fields (acf®)Advanced Custom Fields < 6.8.11 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields2.7 Low
- unknown advanced custom fields (acf®)Advanced Custom Fields (ACF®) < 6.8.11 - Unauthenticated Stored XSS via HTML Attribute Name Injection7.5 High
- wpengine advanced custom fields (acf®)Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters5.3 Medium
- wpengine advanced custom fields (acf®)Advanced Custom Fields (ACF®) <= 6.7.0 - Unauthenticated Missing Authorization to Arbitrary Post/Page Disclosure via AJAX Field Query Parameters5.3 Medium
- advancedcustomfields advanced custom fields, delicious brains advanced custom fields pro, wpengine advanced custom fields (acf®) +2 moreAdvanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field6.4 Medium