wpengine Advanced Custom Fields (ACF®)

• CVE-2026-8382 Medium 5.3 Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters 0.5%
• CVE-2026-4812 Medium 5.3 Advanced Custom Fields (ACF®) <= 6.7.0 - Unauthenticated Missing Authorization to Arbitrary Post/Page Disclosure via AJAX Field Query Parameters 0.9%
• CVE-2023-6701 Medium 6.4 Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field 0.5%