Lucene search
+L

2 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:43 a.m.19 views

CVE-2024-37250

Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1...

5.4CVSS7AI score0.00297EPSS
SaveExploits0
Patchstack
Patchstack
added 2024/06/26 12:0 a.m.12 views

WordPress Advanced Custom Fields PRO Plugin < 6.3.2 is vulnerable to Broken Access Control

Software Advanced Custom Fields PRO Type Plugin Vulnerable versions 6.3.2 Fixed in 6.3.2 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37250 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 5d5f89be56d4 Credits Rafie Muhammad...

5.4CVSS6.9AI score0.00297EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder