Danbilabs vulnerabilities
We track 2 vulnerabilities in Danbilabs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Danbilabs vulnerabilities
- 8.8 High severity
Advanced Members for ACF: Improper Privilege Management
The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.0 via the `acf[_amem_local_user_password]` parameter of the `[advanced-members-account-password]` shortcode form submission. This
- 8.8 High severity
Advanced Members for ACF: Improper Limitation of a Pathname to a Restricted Directory
The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1.2.5. This makes it possible for authenticated attackers, wit