HW
Vendor
hwk-fr
4
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2839 New | AC Advanced Custom Fields: Extended hwk-fr | 5.3 | Oct 28 | Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints |
| CVE-2026-10752 New | AC Advanced Custom Fields: Extended hwk-fr | 4.8 | Oct 27 | Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field |
| CVE-2026-8809 | AC Advanced Custom Fields: Extended hwk-fr | 9.8 | May 28 | Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter |
| CVE-2025-15463 | AC Advanced Custom Fields: Extended hwk-fr | 6.5 | May 12 | Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution |