AE
Vendor
ACF Extended
5
CVEs
0
On KEV
3
New 30D
Products
AE7.5
ACF Extended
ACF Extended
4 CVEs0 on KEV3 new
AC7.2
Advanced Custom Fields:extended
Acf-extended
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112313 New | AE ACF Extended ACF Extended | 7.1 | Oct 22 | WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-112311 New | AE ACF Extended ACF Extended | 6.5 | Oct 22 | WordPress ACF Extended plugin <= 0.9.2.7 - Arbitrary File Deletion vulnerability |
| CVE-2026-112312 New | AE ACF Extended ACF Extended | 7.5 | Oct 22 | WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability |
| CVE-2026-81284 | AE ACF Extended ACF Extended | 4.3 | Aug 28 | WordPress ACF Extended plugin <= 0.9.2.6 - Broken Access Control vulnerability |
| CVE-2021-24865 | AC Advanced Custom Fields:extended Acf-extended | 7.2 | Jan 24 | The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL… |