IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
4.3Medium

CVE-2024-37249WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability

WPEngine Inc. Advanced Custom Fields PRO Published: (2 years ago)

Description

Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1.

Weakness (CWE): CWE-862

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
WPEngine Inc. Advanced Custom Fields PRO ≤ 6.3.1

References and patches

Recent CVEs in the same product — WordPress plugins & themes