WordPress Advanced Custom Fields (acf%c2%ae) Vulnerabilities

Wordpress Advanced Custom Fields (acf%c2%ae) vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

1 August 2026

Sensitive Information Exposure in WordPress Plugin Affecting ACF and Others
CVE-2026-17580
WordPressAdvanced Views – Displ...6.5MEDIUM

31 May 2026

Authorization Bypass in Advanced Custom Fields Plugin for WordPress
CVE-2026-8382
WordPressAdvanced Custom Fields...5.3MEDIUM

15 April 2026

Missing Authorization in Advanced Custom Fields Plugin for WordPress
CVE-2026-4812
WordPressAdvanced Custom Fields...5.3MEDIUM

23 September 2025

Server-Side Template Injection in Advanced Views Plugin for WordPress
CVE-2025-10380
WordPressAdvanced Views – Displ...8.8HIGH

16 October 2024

Freemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974
WordPressYasr – Yet Another Sta...6.3MEDIUM

20 June 2024

ACF Plugin Vulnerability Allows Unauthorized Access to Custom Fields
CVE-2024-4565
WordpressAdvanced Custom Fields...👾🟡6.5MEDIUM

5 February 2024

Stored Cross-Site Scripting Vulnerability in ACF Plugin for WordPress
CVE-2023-6701
WordPressAdvanced Custom Fields...6.4MEDIUM

8 January 2024

WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure
CVE-2022-40696
WordPressAdvanced Custom Fields...3.7LOW

2 May 2023

Advanced Custom Fields - Contributor+ PHP Object Injection
CVE-2023-1196
WordpressAdvanced Custom Fields...👾🟡8.8HIGH