Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

hwk-fr vulnerabilities

12 published CVEs name hwk-fr among the affected products.

Published CVEs
12
Last 12 months
8
Critical
3
Known exploited
0

Critical 3High 2Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20232
  2. 20242
  3. 20251
  4. 20267

Newest CVEs

  • CVE-2026-110305

    Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]' Parameter via {get_user} Template Tag Injection

    hwk-fr · Advanced Custom Fields: Extended

    High7.5
  • CVE-2026-2839

    Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints

    hwk-fr · Advanced Custom Fields: Extended

    Medium5.3
  • CVE-2026-10752

    Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field

    hwk-fr · Advanced Custom Fields: Extended

    Medium4.8
  • CVE-2026-8809

    Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

    hwk-fr · Advanced Custom Fields: Extended

    Critical9.8
  • CVE-2025-15463

    Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution

    hwk-fr · Advanced Custom Fields: Extended

    Medium6.5
  • CVE-2025-12037

    WP 404 Auto Redirect <= 1.0.5 - Authenticated (Admin+) Stored Cross-Site Scripting

    hwk-fr · WP 404 Auto Redirect to Similar Post

    Medium4.4
  • CVE-2025-14533

    Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action

    hwk-fr · Advanced Custom Fields: Extended

    Critical9.8
  • CVE-2025-13486

    Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form

    hwk-fr · Advanced Custom Fields: Extended

    Critical9.8
  • CVE-2024-32559

    WordPress WP 404 Auto Redirect to Similar Post plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

    hwk-fr · WP 404 Auto Redirect to Similar Post

    High7.1
  • CVE-2024-0509

    WP 404 Auto Redirect to Similar Post <= 1.0.3 - Reflected Cross-Site Scripting via request

    hwk-fr · WP 404 Auto Redirect to Similar Post

    Medium6.1