WP Engine Advanced Custom Fields vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20241

Newest CVEs

• CVE-2024-45429

  Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an…

  WP Engine · Advanced Custom Fields

  Medium6.1
• CVE-2023-40068

  Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote…

  WP Engine · Advanced Custom Fields

  Medium5.4
• CVE-2023-30777

  WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)

  WP Engine · Advanced Custom Fields Pro

  High7.1