Advanced Custom Fields Extended Pro (Unknown) - vulnerabilities (CVEs)

5 CVEs, 5 in the last 30 days, 1 known versions, newest CVE from 2026-10-23. Vendor: Unknown.

CVEs of Advanced Custom Fields Extended Pro

• CVE-2026-94263 - CVSS 4.8 (medium), 2026-10-23: The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode…
• CVE-2026-94268 - CVSS 8.1 (high), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not resolve…
• CVE-2026-94267 - CVSS 9 (critical), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform…
• CVE-2026-94264 - CVSS 6.8 (medium), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not validate…
• CVE-2026-94262 - CVSS 8.1 (high), 2026-10-23: The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not verify…