WPEngine, Inc. advanced_custom_fields Schwachstellen (CVE)

Für WPEngine, Inc. advanced_custom_fields veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse

3.4Niedrig

CVE-2025-54940 vor 1 Jahr

WPEngine, Inc. Advanced Custom Fields

An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may be rendered and page display may be tampered.

6.6Mittel

CVE-2024-9529 vor 1 Jahr

Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution

Secure Custom Fields; Advanced Custom Fields Pro; wpengine advanced_custom_field_pro; wpengine advanced_custom_fields

The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from running arbitrary functions through its setting import functiona…

7.5Hoch

CVE-2024-4565 vor 2 Jahren

Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access

Advanced Custom Fields (ACF); Advanced Custom Fields Pro; wpengine advanced_custom_field_pro; wpengine advanced_custom_fields

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access