Show filters
26 Total Results
Displaying 21-26 of 26
Sort by:
Attacker Value
Unknown
CVE-2021-20867
Disclosure Date: December 13, 2021 (last updated October 07, 2023)
Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in moving the field group which may allow a user to move the unauthorized field group via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-20866
Disclosure Date: December 13, 2021 (last updated October 07, 2023)
Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in obtaining the user list which may allow a user to obtain the unauthorized information via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-20865
Disclosure Date: December 13, 2021 (last updated October 07, 2023)
Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors.
0
Attacker Value
Unknown
CVE-2021-24241
Disclosure Date: April 22, 2021 (last updated November 28, 2024)
The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page.
0
Attacker Value
Unknown
CVE-2020-36172
Disclosure Date: January 06, 2021 (last updated November 28, 2024)
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS.
0
Attacker Value
Unknown
CVE-2018-20986
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
0
