acf-extended-pro
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type | acf-extended-pro | WordPress | Critical | Fix reported | |
| Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting | acf-extended-proacf-extended | WordPress | Medium | Fix reported | |
| Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Remote Code Execution | acf-extended-proacf-extended | WordPress | Critical | Fix reported | |
| Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Privilege Escalation via Account Takeover | acf-extended-proacf-extended | WordPress | Critical | Fix reported | |
| Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Arbitrary Non-Admin Account Takeover | acf-extended-proacf-extended | WordPress | High | Fix reported |