WordPress Advanced Custom Fields Vulnerabilities

Wordpress Advanced Custom Fields vulnerabilities.

15 November 2024

Arbitrary Function Execution Through Setting Import
CVE-2024-9529
WordpressSecure Custom Fields👾🟡

16 October 2024

Freemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974
WordpressYasr – Yet Another Sta...6.3MEDIUM

20 June 2024

ACF Plugin Vulnerability Allows Unauthorized Access to Custom Fields
CVE-2024-4565
WordpressAdvanced Custom Fields...👾🟡6.5MEDIUM

5 February 2024

Stored Cross-Site Scripting Vulnerability in ACF Plugin for WordPress
CVE-2023-6701
WordpressAdvanced Custom Fields...6.4MEDIUM

20 October 2023

Stored Cross-Site Scripting in Advanced Custom Fields: Extended for WordPress
CVE-2023-5292
WordpressAdvanced Custom Fields...5.4MEDIUM

31 July 2023

Multiple Plugins from Addify - Multiple CSRF
CVE-2022-4888
WordpressCheckout Fields Manager6.5MEDIUM

2 May 2023

Advanced Custom Fields - Contributor+ PHP Object Injection
CVE-2023-1196
WordpressAdvanced Custom Fields...👾🟡8.8HIGH

22 August 2022

Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload
CVE-2022-2594
WordpressAdvanced Custom Fields8.8HIGH

24 January 2022

Advanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL Injection
CVE-2021-24865
WordpressAdvanced Custom Fields...7.2HIGH

22 April 2021

Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)
CVE-2021-24241
WordpressAdvanced Custom Fields...6.1MEDIUM

6 January 2021

CVE-2020-36172
WordpressAdvanced Custom Fields6.1MEDIUM

22 August 2019

CVE-2018-20986
WordpressAdvanced Custom Fields5.4MEDIUM

No more vulnerabilities to load.