Skip to content
OpenAdvisories

Vendor

hwk-fr

12 known vulnerabilities.

Products

Advanced Custom Fields: Extended 8 WP 404 Auto Redirect to Similar Post 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-8809 Public exploit

    Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

    The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2.5. The vulnerability exists due to the after_validate_save_post() function unconditionally trusting…

    hwk-fr Advanced Custom Fields: Extended Web / CMS
  • Critical 9.8
    CVE-2025-13486 Public exploit Scanner template EPSS 69%

    Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_form

    The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() function. This is due to the function accepting user input and then passing that through call_user_func…

    hwk-fr Advanced Custom Fields: Extended Web / CMS