Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbTom van MiltenburgWPVDB-ID:F322619A-E85D-4931-8785-EB9CF30CEF7F
HistoryAug 25, 2021 - 12:00 a.m.

Advanced Custom Fields < 5.11 - Subscriber+ Arbitrary ACF Data/Field Groups View and Fields Move

2021-08-2500:00:00
Tom van Miltenburg
wpscan.com
11
JSON

Some of the functions did not have proper capability checks in place, allowing low privilege users such as subscribers to view arbitrary ACF data, movie fields, as well as view field groups.

Related

jvn 1
cve 3
prion 3
cnvd 3
jvn
jvn
JVN#09136401: Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields"
2021-12-02 00:00:00
cve
cve
CVE-2021-20865
2021-12-13 07:15:00
CVE-2021-20866
2021-12-13 07:15:00
CVE-2021-20867
2021-12-13 07:15:00
prion
prion
Authorization
2021-12-13 07:15:00
Authorization
2021-12-13 07:15:00
Authorization
2021-12-13 07:15:00
cnvd
cnvd
Delicious Brains Advanced Custom Fields Access Control Error Vulnerability
2021-12-04 00:00:00
Delicious Brains Advanced Custom Fields Information Disclosure Vulnerability
2021-12-06 00:00:00
Delicious Brains Advanced Custom Fields Licensing Issue Vulnerability
2021-12-04 00:00:00
JSON
Related for WPVDB-ID:F322619A-E85D-4931-8785-EB9CF30CEF7F
jvn1cve3prion3cnvd3