What’s Vulnerable › Products

Advanced Custom Fields: Extended PRO vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Advanced Custom Fields: Extended PRO version is affected

Latest Advanced Custom Fields: Extended PRO vulnerabilities

• CVE-2026-94268 — Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action (CVSS 8.1)
• CVE-2026-94267 — Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action (CVSS 9.0)
• CVE-2026-94264 — Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes (CVSS 6.8)
• CVE-2026-94262 — Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action (CVSS 8.1)