Skip to content
OpenAdvisories

Vendor

valentinpellegrin

1 known vulnerabilities.

Products

ACF Flexible Layouts Manager 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-12937

    ACF Flexible Layouts Manager <= 1.1.6 - Missing Authorization to Unauthenticated Custom Field Update

    The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acf_flm_update_template_with_pasted_layout' function in all versions up to, and including, 1.1.6. This makes it …

    valentinpellegrin ACF Flexible Layouts Manager Web / CMS