Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: danbilabs Clear all filters
TI-2026-85891 CVE-2026-116624 · GHSA-r29v-jf4c-hpxx

Privilege escalation in Advanced Members for ACF plugin

Priority MEDIUM 41

The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.0 via the `acf[_amem_local_user_password]` parameter of the `[advanced-members-account-pas…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00496 Published 2026-11-06 No fix listed CWE-269
TI-2026-02804 CVE-2026-3243 · GHSA-jr6v-4pq3-3xxx

Advanced Members for ACF <= 1.2.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal

Priority MEDIUM 42

The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up to, and including, 1.2.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00821 Published 2026-04-08 No fix listed CWE-22