Login Request a demo
AC
Product
Advanced Custom Fields: Extended
by hwk-fr · last CVE Oct 28, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities4Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Advanced Custom Fields: Extended to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-8809
9.8
1%
May 28
Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter
Affected: through 0.9.2.5
Showing 1