CVE-2026-96743

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 1.4.1-RC2 . The root cause is insufficient input sanitization and output escaping of Table Field Values. This allows authenticated attackers with subscrib...

WordPress Table Field Add-on for ACF and SCF plugin < 1.4.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Field Value vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting via Table Field Value vulnerability discovered by Kuba in WordPress Plugin Table Field Add-on for ACF and SCF versions 1.4.1...