Skip to content
Unknown Advanced Custom Fields: Extended
-
CVE-2026-94263
Medium 4.8
Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message
0.2%
-
CVE-2026-94268
High 8.1
Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action
0.3%
-
CVE-2026-94267
Critical 9.0
Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action
0.4%
-
CVE-2026-94264
Medium 6.8
Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes
0.3%
-
CVE-2026-94262
High 8.1
Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action
0.3%
-
CVE-2026-80467
High 8.1
Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action
0.4%
-
CVE-2026-12526
High 8.1
Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action
0.4%
-
CVE-2021-24865
Unrated
Advanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL Injection
1.5%