CyberSecBulletin

WC Fields Factory vulnerabilities

We track 1 vulnerability in WC Fields Factory products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest WC Fields Factory vulnerabilities

  • 8.1 High severity

    WC Fields Factory: Missing Authorization

    CVE-2026-93508WC Fields Factory

    The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with Subscriber-level access and above to create, modify and delete arbitrary post meta on any post, includ