Security
فارسی
All products

advanced-custom-fields-pro

WordPress · Plugin
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Advanced Custom Fields PRO < 6.3.2 - Missing AuthorizationCVE-2024-37249 advanced-custom-fields-pro WordPress Medium Fix reported
Advanced Custom Fields <= 6.3.5 - Authenticated Stored Cross-Site ScriptingCVE-2024-45429 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields Pro <= 6.3.1 - Cross-Site Request ForgeryCVE-2024-37251 advanced-custom-fields-pro WordPress Medium Fix reported
Advanced Custom Fields Pro <= 6.3.1 - Missing AuthorizationCVE-2024-37250 advanced-custom-fields-pro WordPress Medium Fix reported
Advanced Custom Fields <= 6.3.8 & Secure Custom Fields <= 6.3.6.2 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-49593 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields <= 6.3.8 - Authenticated (Admin+) Limited Arbitrary Function CallCVE-2024-9529 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields <= 6.2.10 - Authenticated (Contributor+) Arbitrary Custom Field AccessCVE-2024-4565 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom FieldCVE-2023-6701 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields Pro <= 6.2.9 - Authenticated (Contributor+) Local File InclusionCVE-2024-34762 advanced-custom-fields-pro WordPress High Fix reported
Advanced Custom Fields Pro <= 6.2.9 - Authenticated (Contributor+) Code InjectionCVE-2024-34761 advanced-custom-fields-pro WordPress Critical Fix reported
Advanced Custom Fields <= 5.10 - Missing Authorization to Information DisclosureCVE-2021-20866 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields (Free and Pro) 5.8.10 to 5.12.5 & 6.0.0 to 6.1.5 - Reflected Cross-Site Scripting via 'post_status'CVE-2023-30777 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields <= 5.10 - Missing Authorization to Information DisclosureCVE-2021-20865 advanced-custom-fields-proadvanced-custom-fields WordPress High Fix reported
Advanced Custom Fields Pro <= 5.9.0 - Reflected Cross-Site ScriptingCVE-2021-24241 advanced-custom-fields-pro WordPress Medium Fix reported
Advanced Custom Fields <= 5.10 - Missing Authorization on Option ChangesCVE-2021-20867 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported
Advanced Custom Fields PRO 6.1 - 6.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting advanced-custom-fields-pro WordPress Medium Fix reported
Advanced Custom Fields <= 5.12 - Authenticated Information DisclosureCVE-2022-23183 advanced-custom-fields-proadvanced-custom-fields WordPress Medium Fix reported