Advanced Custom Fields

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Advanced Custom Fields records in CISA KEV

No Advanced Custom Fields vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Custom Fields 15 records HIGH Acf Fronted Display 1 record MEDIUM

Records

1 record in Acf Fronted Display · all components

TI-2015-07856 CVE-2015-9479 · GHSA-f7g9-p35r-g9h9

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file…

MEDIUM 47

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02774 Published 2019-10-10 No fix listed CWE-434

Open these records in search →

Critical	2
High	6
Medium	9
Low	0
No CVSS	0