TI-2026-10666 CVE-2026-12428 · GHSA-8mgm-62qj-rh6h
Missing authorization in gamaup Blocks for ACF Fields — Display Custom Fields in the…
Priority LOW 29
The Blocks for ACF Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the get_all_values() function in the /wp-json/acf-field-blocks/v1/values REST endpoint in v…