CVE-2021-20867

🗓️ 13 Dec 2021 06:40:16Reported by jpcertType

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in moving the field group

Reporter	Title	Published	Views	Family All 14
CNNVD	Delicious Brains Advanced Custom Fields 安全漏洞	2 Dec 202100:00	–	cnnvd
CNVD	Delicious Brains Advanced Custom Fields Licensing Issue Vulnerability	4 Dec 202100:00	–	cnvd
Cvelist	CVE-2021-20867	13 Dec 202106:40	–	cvelist
EUVD	EUVD-2021-8276	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#09136401: Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields"	2 Dec 202100:00	–	jvn
Japan Vulnerability Notes	Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields"	2 Dec 202106:02	–	jvn
NVD	CVE-2021-20867	13 Dec 202107:15	–	nvd
Patchstack	WordPress Advanced Custom Fields PRO plugin < 5.11 - Missing Authorization on Option Changes vulnerability	4 Oct 202409:28	–	patchstack
Patchstack	WordPress Advanced Custom Fields plugin < 5.11 - Missing Authorization on Option Changes vulnerability	4 Oct 202409:27	–	patchstack
Patchstack	WordPress Advanced Custom Fields PRO Plugin < 5.11 is vulnerable to Broken Access Control	4 Oct 202400:00	–	patchstack

NVD

Vulners

Node

advancedcustomfields advanced_custom_fieldsRange<5.11wordpress

advancedcustomfields advanced_custom_fieldsRange<5.11prowordpress

[
  {
    "product": "Advanced Custom Fields and Advanced Custom Fields Pro",
    "vendor": "Delicious Brains",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 5.11"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/advanced-custom-fields/
advancedcustomfields	www.advancedcustomfields.com/
jvn	www.jvn.jp/en/jp/JVN09136401/index.html

21 Nov 2024 05:47Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.16.5

EPSS0.00746

CWE-862