Advanced Custom Fields (Wp Engine) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-04. Vendor: Wp Engine.

CVEs of Advanced Custom Fields

• CVE-2024-45429 - CVSS 6.1 (medium), 2024-09-04: Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If…
• CVE-2023-40068 - CVSS 5.4 (medium), 2023-08-21: Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote…
• CVE-2023-30777 - CVSS 7.1 (high), 2023-05-10: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.