What’s Vulnerable › Products
Advanced Custom Fields: Extended vulnerabilities
8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your Advanced Custom Fields: Extended version is affected
Latest Advanced Custom Fields: Extended vulnerabilities
- CVE-2026-94268 — Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action (CVSS 8.1)
- CVE-2026-94267 — Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action (CVSS 9.0)
- CVE-2026-94264 — Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes (CVSS 6.8)
- CVE-2026-94262 — Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action (CVSS 8.1)
- CVE-2026-80467 — Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action (CVSS 8.1)
- CVE-2026-12526 — Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action (CVSS 8.1)
- CVE-2021-24865 — Advanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL Injection (CVSS 7.2)