Advanced Custom Fields (ACF) Pro vulnerabilities
We track 1 vulnerability in Advanced Custom Fields (ACF) Pro products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2023.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Advanced Custom Fields (ACF) Pro vulnerabilities
- 8.8 High severity
Advanced Custom Fields (ACF): Deserialization of Untrusted Data
The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is pr