Read the docs

danbilabs

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

danbilabs records in CISA KEV

No danbilabs vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-02804 CVE-2026-3243 · GHSA-jr6v-4pq3-3xxx

Advanced Members for ACF <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal

Priority MEDIUM 42

The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1.2.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00821 Published 2026-04-08 No fix listed CWE-22
TI-2026-85891 CVE-2026-116624 · GHSA-r29v-jf4c-hpxx

Privilege escalation in Advanced Members for ACF plugin

Priority MEDIUM 41

The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.0 via the `acf[_amem_local_user_password]` parameter of the `[advanced-members-account-pas…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00496 Published 2026-11-06 No fix listed CWE-269
Open these records in search →