Advanced Custom Fields Extended (Unknown) - vulnerabilities (CVEs)
8 CVEs, 5 in the last 30 days, 1 known versions, newest CVE from 2026-10-23. Vendor: Unknown.
CVEs of Advanced Custom Fields Extended
- CVE-2026-94263 - CVSS 4.8 (medium), 2026-10-23: The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode…
- CVE-2026-94267 - CVSS 9 (critical), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform…
- CVE-2026-94264 - CVSS 6.8 (medium), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not validate…
- CVE-2026-94268 - CVSS 8.1 (high), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not resolve…
- CVE-2026-94262 - CVSS 8.1 (high), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not verify…
- CVE-2026-80467 - CVSS 8.1 (high), 2026-09-02: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the…
- CVE-2026-12526 - CVSS 8.1 (high), 2026-09-02: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not verify that the requester is authorized to edit the targeted user account in the…
- CVE-2021-24865 - CVSS 7.2 (high), 2022-01-24: The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement,…
