Description

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access

Remediation

References

CVE-2024-4565

Related Vulnerabilities

WordPress Plugin Yoast SEO SQL Injection (1.7.3.3)

WordPress Plugin Job Manager Multiple Cross-Site Scripting Vulnerabilities (0.7.18)

Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-6232)

Python Integer Overflow or Wraparound Vulnerability (CVE-2008-4864)

MySQL CVE-2015-2576 Vulnerability (CVE-2015-2576)

Severity

Medium

Classification

CVE-2024-4565 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities