Description

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access

Remediation

References

CVE-2024-4565

Related Vulnerabilities

CubeCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20703)

MongoDb Use After Free Vulnerability (CVE-2026-4148)

MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5278)

WordPress Plugin TemplatesNext ToolKit Cross-Site Scripting (3.2.7)

SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-58639)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CVE-2024-4565