Advanced Custom Fields vulnerabilities

1 known vulnerability in Advanced Custom Fields from TODO. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Advanced Custom Fields: Unrestricted Upload of File with Dangerous Type

  CVE-2022-2594Aug 22, 2022TODOEPSS 1.61%

  The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form availab