CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

454 matches found

Vulnrichment•added 2023/08/21 8:13 a.m.•20 views

CVE-2023-40068

Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product with the administrative...

6.5AI score0.0197EPSS

SaveExploits0References4

Japan Vulnerability Notes•added 2023/08/21 5:05 a.m.•14 views

WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting

Overview WordPress Plugin "Advanced Custom Fields" provided by WP Engine contains a cross-site scripting vulnerability CWE-79. Ryotaro Imamura of SB Technology Corp. and Satoo Nakano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

5.4CVSS6.1AI score0.0197EPSS

SaveExploits0References7

Rapid7 Vulnerability Database (full)•added 2023/08/21 12:00 a.m.•1 views

CVE-2023-40068: Improper Neutralization of Input During Web Page Generation

5.4CVSS6.2AI score0.0197EPSS

SaveExploits0References2

Japan Vulnerability Notes•added 2023/08/21 12:00 a.m.•48 views

JVN#98946408: WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting

WordPress Plugin "Advanced Custom Fields" provided by WP Engine contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the product with the editor or higher privilege. Solution Update the plugin Update t...

5.4CVSS5.7AI score0.0197EPSS

SaveExploits0

CNNVD•added 2023/08/21 12:00 a.m.•13 views

WordPress plugin Advanced Custom Fields 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.4CVSS5.8AI score0.0197EPSS

SaveExploits0References6

Patchstack•added 2023/08/10 12:00 a.m.•14 views

WordPress Advanced Custom Fields PRO Plugin 6.1-6.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields PRO Type Plugin Vulnerable versions 6.1-6.1.7 Fixed in 6.1.8 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE N/A Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID c4bf4250f3b3 Credits Satoo Nakano Ryotaro Imamura Require...

6.9AI score

SaveExploits0References1Affected Software1

Patchstack•added 2023/08/03 12:00 a.m.•29 views

WordPress Advanced Custom Fields Plugin 6.1-6.1.7 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields Type Plugin Vulnerable versions 6.1-6.1.7 Fixed in 6.1.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-40068 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ad8c9dc6f2b9 Credits Satoo Nakano...

5.4CVSS5.7AI score0.0197EPSS

SaveExploits0References3Affected Software1

Positive Technologies•added 2023/07/27 12:00 a.m.•15 views

PT-2023-27024 · WordPress · Acf Photo Gallery Field

Name of the Vulnerable Software and Affected Versions: ACF Photo Gallery Field plugin for WordPress versions up to, and including, 1.9 Description: The issue allows authenticated attackers with subscriber-level permissions or above to modify data unauthorizedly due to insufficient restrictions on...

4.3CVSS5.3AI score0.00503EPSS

SaveExploits0References7

BDU FSTEC•added 2023/07/25 12:00 a.m.•20 views

The vulnerability of the Advanced Custom Fields plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Advanced Custom Fields plugin in the WordPress content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

9CVSS7AI score0.38768EPSS

SaveExploits3References4Affected Software2

Patchstack•added 2023/07/19 12:00 a.m.•15 views

WordPress Advanced Custom Fields Frontend Forms Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields Frontend Forms Type Plugin Vulnerable versions = 1.3.4 Fixed in 1.3.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID e7bf47e904be Credits Rafie Muhammad...

5.8AI score0.00272EPSS

SaveExploits0References3Affected Software1

Patchstack•added 2023/07/18 12:00 a.m.•9 views

WordPress Advanced Custom Fields options import/export Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)

Software Advanced Custom Fields options import/export Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 4db49edd1f34 Credits Rafie...

6.4AI score0.00272EPSS

SaveExploits0References2Affected Software1

Tenable Nessus•added 2023/05/17 12:00 a.m.•18 views

Advanced Custom Fields for WordPress < 5.12.6 Cross-Site Scripting

The WordPress Advanced Custom Fields Plugin installed on the remote host is affected by a Cross-Site Scripting. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

7.1CVSS7.4AI score0.38768EPSS

SaveExploits3References3

hivepro•added 2023/05/15 10:07 a.m.•17 views

XSS Vulnerability in Popular WordPress Plugin Affects 2 Million Sites

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A Cross-Site scripting vulnerability has been discovered in an Advanced Custom Fields plugin for WordPress which has put 2 Million websites at risk. To receive real-time threat advisories, please...

6.4AI score

SaveExploits0