Path Traversal Vulnerability in Advanced Custom Fields PRO

CVE-2024-34762

Summary

The vulnerability identified in Advanced Custom Fields PRO introduces a potential threat through improper limitation of a pathname to a restricted directory, commonly referred to as Path Traversal. This flaw enables PHP Local File Inclusion, which could allow an attacker to access sensitive files on the server, leading to unauthorized information disclosure or further exploitation. Affected versions are those prior to 6.2.10, making it essential for users to update to the latest version to mitigate risks associated with this vulnerability.

References