Delicious Brains
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Custom Fields and Advanced Custom Fields Pro | 3 | – | Dec 13, 2021 |
| Advanced Custom Fields | 1 | – | Mar 31, 2022 |
| Advanced Custom Fields Pro | 1 | – | Feb 5, 2024 |
| Database Backup for WordPress | 1 | – | Jun 1, 2021 |
| WP Offload SES Lite | 1 | – | Jul 6, 2021 |
Exploited and recent CVEs
- CVE-2023-6701 Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field 0.5%
- CVE-2022-23183 Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the inform 1.5%
- CVE-2021-20867 Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in moving the field group which may allow a user to mo 1.5%
- CVE-2021-20866 Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in obtaining the user list which may allow a user to o 1.8%
- CVE-2021-20865 Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse 2.6%
- CVE-2021-24494 WP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS) 0.7%
- CVE-2021-24322 Database Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS) 0.7%