dbcve.org
Vulnerability index

Browse CVEs

16 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Advanced Custom Fields MEDIUM 6.6
CVE-2024-9529

The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress pl…

Fix: 6.3.9+
Fix from $1,600 2024-11-15
Advanced Custom Fields MEDIUM 6.5
CVE-2024-4565

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom fie…

Fix: 6.3+
Fix from $1,600 2024-06-20
Advanced Custom Fields MEDIUM 5.4
CVE-2023-6701

The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text field in all versions up to, and…

Fix: after 6.2.4
Fix from $1,600 2024-02-05
Advanced Custom Fields HIGH 7.5
CVE-2022-40696

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom…

Fix: after 6.0.2
Fix from $1,950 2024-01-08
Advanced Custom Fields MEDIUM 5.4
CVE-2023-40068

Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a …

Fix: after 6.1.7
Fix from $1,600 2023-08-21
Advanced Custom Fields MEDIUM 6.1
CVE-2023-30777EPSS 39%

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5…

Fix: 6.1.6+
Fix from $1,600 2023-05-10
Advanced Custom Fields HIGH 8.8
CVE-2023-1196

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which coul…

Fix: 5.12.5 / 6.1.0+
Fix from $1,950 2023-05-02
Advanced Custom Fields HIGH 8.8
CVE-2022-2594

The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to …

Fix: 5.12.3+
Fix from $1,950 2022-08-22
Advanced Custom Fields MEDIUM 6.5
CVE-2022-23183

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows…

Fix: 5.12.1+
Fix from $1,600 2022-03-31
Advanced Custom Fields MEDIUM 6.5
CVE-2021-20867

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in …

Fix: 5.11+
Fix from $1,600 2021-12-13
Advanced Custom Fields HIGH 7.5
CVE-2021-20865

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in …

Fix: 5.11+
Fix from $1,950 2021-12-13
Advanced Custom Fields MEDIUM 6.5
CVE-2021-20866

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in …

Fix: 5.11+
Fix from $1,600 2021-12-13
Advanced Custom Fields MEDIUM 6.1
CVE-2021-24241

The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outputting it in an attribute, lea…

Fix: 5.9.1+
Fix from $1,600 2021-04-22
Advanced Custom Fields MEDIUM 6.1
CVE-2020-36172

The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS.

Fix: 5.8.12+
Fix from $1,600 2021-01-06
Acf Fronted Display CRITICAL 9.8
CVE-2015-9479

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upl…

Fix: after 2015-07-03
Fix from $2,300 2019-10-10
Advanced Custom Fields MEDIUM 5.4
CVE-2018-20986

The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.

Fix: 5.7.8+
Fix from $1,600 2019-08-22