Advancedcustomfields vulnerabilities
We track 3 vulnerabilities in Advancedcustomfields products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2024.
Latest Advancedcustomfields vulnerabilities
- 8.5 High severity
Advanced Custom Fields PRO: Improper Control of Generation of Code
Vulnerability discovered by executing a planned security audit. Improper Control of Generation of Code ('Code Injection') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows Code Injection.This issue affects Advanced Custom Fields PRO: from n/a bef
- 7.5 High severity
Advanced Custom Fields (ACF): Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2.
- 8.8 High severity
Advanced Custom Fields (ACF): Deserialization of Untrusted Data
The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is pr