Read the docs

ACF Extended

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

ACF Extended records in CISA KEV

No ACF Extended vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Custom Fields 1 record LOW

Records

1 record in Advanced Custom Fields · all components

TI-2021-07147 CVE-2021-24865 · GHSA-g65w-52r3-4hxv

Advanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL Injection

Priority LOW 35

The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL Injection issue

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01502 Published 2022-01-24 Fixed in 0.8.8.7 CWE-89
Open these records in search →