4 matches found
CVE-2026-2839
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering of server-side actions in all versions up to, and including, 0.9.2.7. This is due to multiple AJAX handlers registered for unauthenticated users wpajaxnopriv that fail to implemen...
CVE-2026-2839 Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering of server-side actions in all versions up to, and including, 0.9.2.7. This is due to multiple AJAX handlers registered for unauthenticated users wpajaxnopriv that fail to implemen...
CVE-2026-2839
The Advanced Custom Fields: Extended plugin for WordPress (versions up to and including 0.9.2.7 ) is vulnerable to unauthorized data exposure and server-side actions. The root cause is that multiple AJAX handlers registered for unauthenticated users (wp_ajax_nopriv_*) lack proper current_user_can...
EUVD-2026-111603
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering of server-side actions in all versions up to, and including, 0.9.2.7. This is due to multiple AJAX handlers registered for unauthenticated users wpajaxnopriv that fail to implemen...