Skip to content
OpenAdvisories

Vendor

ACF Extended

5 known vulnerabilities.

Products

ACF Extended 4 Advanced Custom Fields: Extended PRO 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-120534

    Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type

    The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 0.9.2.6 via the render_field function. This is due to insufficient validation of form configuration parameters before m…

    ACF Extended Advanced Custom Fields: Extended PRO Web / CMS