Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WP Plugin Advanced Custom Fields Vulnerability - CVE-2024-9529 - Vulnerability Database
WP Plugin Advanced Custom Fields

WP Plugin Advanced Custom Fields Vulnerability - CVE-2024-9529

Medium
Reference: CVE-2024-9529
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-9529
Title: WP Plugin Advanced Custom Fields Vulnerability
Overview:

The Secure Custom Fields WordPress plugin before 6.3.9 Secure Custom Fields WordPress plugin before 6.3.6.3 Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from running arbitrary functions through its setting import functionalities which could allow high privilege users such as admin to run arbitrary PHP functions.