Skip to content
OpenAdvisories

Product · Advanced Custom Fields

WordPress Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2012-10025 Public exploit

    WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion

    The WordPress plugin Advanced Custom Fields (ACF) version 3.5.1 and below contains a remote file inclusion (RFI) vulnerability in core/actions/export.php. When the PHP configuration directive allow_url_include is enabled (default: Off), an unauthenticated att…

    Advanced Custom Fields WordPress Plugin Web / CMS