CVE-2015-9479

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

Design/Logic Flaw

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

CVE-2015-9479

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

CVE-2015-9479

The CVE-2015-9479 issue affects the WordPress ACF-Frontend-Display plugin (versions up to 2015-07-03): it allows arbitrary file upload through an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php. Connected documents confirm the vulnerability description; no expl...

CVE-2015-9479: Unrestricted Upload of File with Dangerous Type

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php...

CVE-2019-14682

The acf-better-search aka ACF: Better Search plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbsadminpage CSRF...

CVE-2019-14682

The acf-better-search aka ACF: Better Search plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbsadminpage CSRF...

Cross site request forgery (csrf)

The acf-better-search aka ACF: Better Search plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbsadminpage CSRF...

CVE-2019-14682

The CVE-2019-14682 entry concerns the WordPress plugin acf-better-search (aka ACF: Better Search) version prior to 3.3.1, which is affected by a CSRF vulnerability via wp-admin/options-general.php?page=acfbs_admin_page. Connected documents corroborate CSRF exposure in this plugin. The impact is d...

CVE-2019-14682

The acf-better-search aka ACF: Better Search plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbsadminpage CSRF...

CVE-2019-14682: Cross-Site Request Forgery (CSRF)

The acf-better-search aka ACF: Better Search plugin before 3.3.1 for WordPress allows wp-admin/options-general.php?page=acfbsadminpage CSRF...

WordPress ACF Better Search plugin <= 3.3.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found in WordPress ACF Better Search plugin versions = 3.3.0. Solution Update the WordPress ACF Better Search plugin to the latest available version at least 3.3.1...

ACF Better Search <= 3.3.0 - Cross-Site Request Forgery (CSRF)

The ACF: Better Search WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Advanced Custom Fields <= 5.7.10 - Unserialize of user input

Multiple maybeunserialize calls result with unserialize of user input. Low priviledged users as contributors, but in many cases visitors too https://medium.com/websec/wordpress-acf-5-7-10-unserialize-of-user-input-ac17cc473e0d...

Security Bulletin: Fixes available for Vulnerabilities in IBM ACF (Active Content Filtering) affects IBM Cúram Social Program Management (CVE-2015-1917, CVE-2016-0243)

Summary IBM Cúram Social Program Management is shipped with IBM Active Content Filtering, which is vulnerable to cross-site scripting caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability by using a specially crafted URL to execute script in a...

WordPress ACF Frontend Display File Upload

File upload vulnerability in WordPress ACF Frontend Display plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WordPress Advanced Custom Fields: Table Field 1.1.12 XSS

Details ================ Software: Advanced Custom Fields: Table Field Version: 1.1.12 Homepage: https://wordpress.org/plugins/advanced-custom-fields-table-field/ Advisory report:...

WordPress ACF Frontend Display Plugin Arbitrary File Upload

An Arbitrary File Upload vulnerability exists in WordPress Advanced custom Fields ACF Frontend Display Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress ACF Frontend Display Plugin Arbitrary File Upload Vulnerability

WordPress is a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.ACF Frontend Display is a plugin to add the type of navigation menu fields. A security vulnerability in the WordPress ACF Frontend Display file upload...

WordPress ACF Frontend Display Plugin 2.0.5 - File Upload Vulnerability

Exploit for php platform in category web applications +---------------------------------------------------------------------------+ + Author: TUNISIAN CYBER + Title: WP Plugin Free ACF Frontend Display File Upload Vulnerability + Date: 3-07-2015 + Type: WebAPP + Download Plugin:...