📦 Advanced Custom Fields

by Advancedcustomfields

🔍 What is Advanced Custom Fields?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-30777

HIGH CVSS 7.1 May 10, 2023

Unauthenticated reflected cross-site scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro and Advanced Custom Fields plugins allows attackers to inject malicious scripts via crafted U...

CVE-2023-1196

HIGH CVSS 8.8 May 2, 2023

This vulnerability in Advanced Custom Fields WordPress plugins allows authenticated users with Contributor role or higher to perform PHP Object Injection by exploiting insecure deserialization of user...

CVE-2024-4565

MEDIUM CVSS 6.5 Jun 20, 2024

This vulnerability in Advanced Custom Fields WordPress plugins allows attackers to display custom field values for any post via shortcode without proper access controls. It affects WordPress sites usi...