Advanced Custom Fields Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:wp_engine:advanced_custom_fields_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wp Engine (cdeff46e-eb63-5090-b1ac-fe6ff84d9907) |
|---|---|
| Product | Advanced Custom Fields Pro (631a5252-4f27-5dd8-a9ec-7e509a6ba936) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45429 |
vulnerable | 2026-06-08 06:48:06.208475 |
Details available
Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the 'capability' setting privilege which is set in the product settings stores an arbitrary script in the field label, the script may be executed on the web browser of the logged-in user with the same privilege as the attacker's.
Published: 2024-09-04T23:07:58.383Z
Updated: 2025-03-25T15:47:51.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-40068 |
vulnerable | 2026-06-08 06:09:41.139463 |
Details available
Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitrary script on the web browser of the user who is logging in to the product with the administrative privilege.
Published: 2023-08-21T08:13:50.271Z
Updated: 2024-10-04T17:57:33.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30777 |
vulnerable | 2026-06-08 06:04:41.124383 |
WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.
Published: 2023-05-10T05:50:04.023Z
Updated: 2026-04-28T16:08:19.637Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.