CVE-2026-3243

The CVE-2026-3243 entry concerns the WordPress plugin Advanced Members for ACF. It states that all versions up to and including 1.2.5 are vulnerable due to insufficient file path validation in the create_crop function, enabling an authenticated user with Subscriber-level access or higher to delet...