Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Advanced Custom Fields PRO — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Advanced Custom Fields PRO, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2024-37251 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2024-12-16
CVE-2024-37250 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability CWE-862 5.4 Medium2024-11-01
CVE-2024-37249 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability CWE-862 4.3 Medium2024-11-01
CVE-2024-34762 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability CWE-22 9.9 Critical2024-06-10
CVE-2024-34761 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability CWE-94 8.5 High2024-06-10
CVE-2023-30777 WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-05-10
CVE-2021-24241 Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS) CWE-79 6.1 -2021-04-22

All 7 known CVE vulnerabilities affecting Advanced Custom Fields PRO with full Chinese analysis, references, and POCs where available.