WordPress Advanced Custom Fields Pro Vulnerabilities
Wordpress Advanced Custom Fields Pro vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross-Site Request Forgery Vulnerability in WPENGINE's Advanced Custom Fields PRO
CVE-2024-37251WordPressAdvanced Custom Fields...4.3MEDIUMArbitrary Function Execution Through Setting Import
CVE-2024-9529WordpressSecure Custom Fields👾🟡Incorrectly Configured Access Control Security Levels Expose Advanced Custom Fields PRO to Missing Authorization Vulnerability
CVE-2024-37250WordPressAdvanced Custom Fields...5.4MEDIUMMissing Authorization Vulnerability in Advanced Custom Fields PRO
CVE-2024-37249WordPressAdvanced Custom Fields...4.3MEDIUMFreemius SDK Vulnerabilities Affect Hundreds of WordPress Plugins and Themes
CVE-2022-4974WordpressYasr – Yet Another Sta...6.3MEDIUMACF Plugin Vulnerability Allows Unauthorized Access to Custom Fields
CVE-2024-4565WordpressAdvanced Custom Fields...👾🟡6.5MEDIUMPath Traversal Vulnerability in Advanced Custom Fields PRO
CVE-2024-34762WordPressAdvanced Custom Fields...9.9CRITICALImproper Control of Generation of Code ('Code Injection') Vulnerability Affects Advanced Custom Fields PRO
CVE-2024-34761WordPressAdvanced Custom Fields...8.5HIGHStored Cross-Site Scripting Vulnerability in ACF Plugin for WordPress
CVE-2023-6701WordpressAdvanced Custom Fields...6.4MEDIUMWordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)
CVE-2023-30777WordPressAdvanced Custom Fields...👾🟡EPSS 88%6.1MEDIUMAdvanced Custom Fields - Contributor+ PHP Object Injection
CVE-2023-1196WordpressAdvanced Custom Fields...👾🟡8.8HIGHAdvanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload
CVE-2022-2594WordpressAdvanced Custom Fields8.8HIGHAuthorization Flaw in Advanced Custom Fields Plugin for WordPress
CVE-2021-20867WordPressAdvanced Custom Fields...6.5MEDIUMAuthorization Vulnerability in Advanced Custom Fields by WordPress
CVE-2021-20866WordPressAdvanced Custom Fields...6.5MEDIUMAdvanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)
CVE-2021-24241WordpressAdvanced Custom Fields...6.1MEDIUM