Vulnerability · Published Aug 22, 2022 · Assigned by WPScan
CVE-2022-2594Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload
High 8.8
In plain English
A high-severity unrestricted file upload in Advanced Custom Fields from TODO. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)1.6%top 23.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form available. This vulnerability was introduced in the 5.0 rewrite and did not exist prior to that release.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TODO | Advanced Custom Fields | 5.0 – before 5.0*5.12.3 – before 5.12.3 |
| TODO | Advanced Custom Fields Pro | 5.0 – before 5.0*5.12.3 – before 5.12.3 |
Weakness: CWE-434