wplakeorg
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… | 2 | – | Aug 1, 2026 |
| Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode | 1 | – | Oct 27, 2026 |
Exploited and recent CVEs
- CVE-2026-109995 Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content 0.2%
- CVE-2026-17580 Advanced Views <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST Endpoints 0.6%
- CVE-2025-10380 Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI 0.4%