CVE-2021-20866

2021-12-1306:40:14

jpcert

www.cve.org

custom fields

authorization

user list

unauthorized access

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

42.5%

JSON

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in obtaining the user list which may allow a user to obtain the unauthorized information via unspecified vectors.

CNA Affected

[
  {
    "product": "Advanced Custom Fields and Advanced Custom Fields Pro",
    "vendor": "Delicious Brains",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 5.11"
      }
    ]
  }
]