Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2021-20865
Disclosure Date: December 13, 2021 (last updated October 07, 2023)
Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-24241
Disclosure Date: April 22, 2021 (last updated November 28, 2024)
The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page.
0
Attacker Value
Unknown
CVE-2020-36172
Disclosure Date: January 06, 2021 (last updated November 28, 2024)
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS.
0
Attacker Value
Unknown
CVE-2015-9479
Disclosure Date: October 10, 2019 (last updated November 27, 2024)
The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.
0
Attacker Value
Unknown
CVE-2018-20986
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
0
