Hwk-fr vulnerabilities
We track 5 vulnerabilities in Hwk-fr products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Hwk-fr vulnerabilities
- 7.5 High severity
Advanced Custom Fields: Extended: Exposure of Sensitive Information to an Unauthorized Actor
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 0.9.2.7 via the process. This makes it possible for unauthenticated attackers to extract sensitive data including th
- 9.8 Critical severity
Advanced Custom Fields: Extended: Improper Privilege Management
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability exists due to the after_validate_save_post() function unconditionally trusting
- 9.8 Critical severity
Advanced Custom Fields: Extended: Improper Privilege Management
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1. This is due to the 'insert_user' function not restricting the roles with which a user can register. This makes it pos
- 9.8 Critical severity
Advanced Custom Fields: Extended: Improper Control of Generation of Code
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() function. This is due to the function accepting user input and then passing that through call_user_func_
- 7.1 High severity
WP 404 Auto Redirect to Similar Post: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post allows Reflected XSS.This issue affects WP 404 Auto Redirect to Similar Post: from n/a through 1.0.4.