AC
Product
Advanced Custom Fields: Extended
4
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 0Medium 3Low 0
Watch
Add Advanced Custom Fields: Extended to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-15463 | 6.5 | May 12 | Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution Affected: through 0.9.2.3 |
| CVE-2026-2839 New | 5.3 | Oct 28 | Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints Affected: through 0.9.2.7 |
| CVE-2026-10752 New | 4.8 | Oct 27 | Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field Affected: through 0.9.2.6 |
Showing 3