acf-views
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content | acf-views | WordPress | High | Fix reported | |
| Advanced Views <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST Endpoints | acf-views | WordPress | Medium | Fix reported | |
| Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… <= 3.8.11 - Authenticated (Subscriber+) Remote Code Execution | acf-views | WordPress | Medium | Fix reported | |
| Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI | acf-views | WordPress | High | Fix reported |