Description

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access

Remediation

References

CVE-2024-4565

Related Vulnerabilities

WordPress Plugin Pricing Table by Supsystic Multiple Vulnerabilities (1.8.1)

WordPress Plugin N-Media Website Contact Form with File Upload Arbitrary File Upload (2.1)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5731)

Ember.js Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1866)

WordPress Plugin Newsletter-Send awesome emails from WordPress SQL Injection (3.0.8)

Severity

Medium

Classification

CVE-2024-4565 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities