WP
Vendor
wplakeorg
3
CVEs
0
On KEV
1
New 30D
Products
AV7.2
Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode
wplakeorg
1 CVEs0 on KEV1 new
AV8.8
Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver…
wplakeorg
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109995 New | AV Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode wplakeorg | 7.2 | Oct 27 | Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content |
| CVE-2026-17580 | AV Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… wplakeorg | 6.5 | Aug 1 | Advanced Views <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST Endpoints |
| CVE-2025-10380 | AV Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… wplakeorg | 8.8 | Sep 23 | Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI |