Vendor

wplakeorg

3 known vulnerabilities.

Products

Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… 2 Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.2

CVE-2026-109995

Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content

The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficient input sanitization and output escapi…

wplakeorg Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode Web / CMS

Oct 27, 2026
High 8.8

CVE-2025-10380

Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI

The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and including, 3.7.19. This is due to insufficient input sanitization and lack of access control when proce…

wplakeorg Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… Web / CMS

Sep 23, 2025