Vulnerabilities

TI-2026-47346 CVE-2026-66678 · GHSA-86cg-5348-hfwg

WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability

LOW 20

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2026-08-06 No fix listed CWE-862

TI-2026-36270 CVE-2026-49044 · GHSA-jvxm-pqmv-6427

WordPress Advanced Custom Fields: Font Awesome Field plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kruit Advanced Custom Fields: Font Awesome Field allows Stored XSS.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00182 Published 2026-05-27 No fix listed CWE-79

TI-2026-05630 CVE-2026-6415 · GHSA-59fm-cmjw-gc79

Cross-site scripting in Justin Kruit Advanced Custom Fields: Font Awesome Field

LOW 28

The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.0.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00274 Published 2026-05-15 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability

WordPress Advanced Custom Fields: Font Awesome Field plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability

Cross-site scripting in Justin Kruit Advanced Custom Fields: Font Awesome Field