WP Plugin Advanced Custom Fields Pro

A WordPress plugin is a piece of software that plugs into your WordPress site. Plugins can add new functionality or extend existing functionality on your site allowing you to create virtually any kind of website from ecommerce stores to portfolios to directory sites.

Official Site:

https://wordpress.org/plugins/advanced-custom-fields-pro

Severity Summary:

High: 1 Medium: 8

Reference

Title

Severity

CVE-2023-1196

WordPress Plugin Advanced Custom Fields PRO PHP Object Injection

High

CVE-2021-24241

WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting

Medium

CVE-2021-20865

WordPress Plugin Advanced Custom Fields PRO Multiple Security Bypass Vulnerabilities

Medium

CVE-2021-20866

WordPress Plugin Advanced Custom Fields PRO Multiple Security Bypass Vulnerabilities

Medium

CVE-2021-20867

WordPress Plugin Advanced Custom Fields PRO Multiple Security Bypass Vulnerabilities

Medium

CVE-2023-30777

WordPress Plugin Advanced Custom Fields PRO Cross-Site Scripting

Medium

CVE-2022-2594

WordPress Plugin Advanced Custom Fields PRO Arbitrary File Upload

Medium

CVE-2022-40696

WordPress Plugin Advanced Custom Fields PRO Information Disclosure

Medium

CVE-2022-23183

WordPress Plugin Advanced Custom Fields PRO Security Bypass

Medium