Lucene search

K
wpvulndbTom van MiltenburgWPVDB-ID:F322619A-E85D-4931-8785-EB9CF30CEF7F
HistoryAug 25, 2021 - 12:00 a.m.

Advanced Custom Fields < 5.11 - Subscriber+ Arbitrary ACF Data/Field Groups View and Fields Move

2021-08-2500:00:00
Tom van Miltenburg
wpscan.com
13

0.001 Low

EPSS

Percentile

46.3%

Some of the functions did not have proper capability checks in place, allowing low privilege users such as subscribers to view arbitrary ACF data, movie fields, as well as view field groups.

0.001 Low

EPSS

Percentile

46.3%

Related for WPVDB-ID:F322619A-E85D-4931-8785-EB9CF30CEF7F