Unknown Advanced Custom Fields (Acf) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Advanced Custom Fields (Acf), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2024-4565advancedcustomfieldsadvanced_custom_fields+4
EPSS score
0.48%
The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access8.8CVE-2023-1196advancedcustomfieldsadvanced_custom_fields+3
EPSS score
1.08%
The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.