Skip to content
OpenAdvisories

Vendor

ACF Extended

5 known vulnerabilities.

Products

ACF Extended 4 Advanced Custom Fields: Extended PRO 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-112313

    WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7.

    ACF Extended ACF Extended
  • High 7.5
    CVE-2026-112312

    WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7.

    ACF Extended ACF Extended