Advanced Custom Fields Extended@* Security Vulnerabilities and Issues — Advanced Custom Fields Extended@* CVE List

Lucene search

AcfextendedAdvanced Custom Fields Extended*

2 matches found

CVE•added 2023/10/20 8:15 a.m.•66 views

CVE-2023-5292

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'acfe_form' shortcode in versions up to, and including, 0.8.9.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authentic...

6.4CVSS5.2AI score0.00148EPSS

CVE•added 2022/01/24 8:15 a.m.•44 views

CVE-2021-24865

The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL Injection issue

7.2CVSS7.2AI score0.00534EPSS