Log in Start free

ACF Extended

Products

ProductCVEsExploitedLatest
ACF Extended4–Oct 22, 2026
Advanced Custom Fields: Extended PRO1–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-120534 Critical 9.8 Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type 0.3%
  • CVE-2026-112313 High 7.1 WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-112311 Medium 6.5 WordPress ACF Extended plugin <= 0.9.2.7 - Arbitrary File Deletion vulnerability 0.3%
  • CVE-2026-112312 High 7.5 WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability 0.3%
  • CVE-2026-81284 Medium 4.3 WordPress ACF Extended plugin <= 0.9.2.6 - Broken Access Control vulnerability 0.3%