Acf Photo Gallery Field
Approved changes feed: RSS · Atom
cpe:2.3:a:navzme:acf_photo_gallery_field:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Navzme (bdde2d45-18e7-5487-abcf-283ead84f2cc) |
|---|---|
| Product | Acf Photo Gallery Field (7c2f8b0b-b4a3-57a5-ab5a-040ac7601854) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-12081 |
vulnerable | 2026-06-08 07:04:29.653723 |
ACF Photo Gallery Field <= 3.0 - Missing Authorization to Authenticated (Subscriber+) Attachment Metadata Modification
MEDIUM (4.3)
The ACF Photo Gallery Field plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the "acf_photo_gallery_edit_save" function in all versions up to, and including, 3.0. This makes it possible for authenticated attackers, with subscriber level access and above, to modify the title, caption, and custom metadata of arbitrary media attachments.
Published: 2026-02-19T03:25:19.703Z
Updated: 2026-04-08T17:25:59.347Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3957 |
vulnerable | 2026-06-08 06:09:40.880620 |
ACF Photo Gallery Field <= 1.9 - Authenticated (Subscriber+) Arbitrary Usermeta Update
MEDIUM (4.3)
The ACF Photo Gallery Field plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient restriction on the 'apg_profile_update' function in versions up to, and including, 1.9. This makes it possible for authenticated attackers, with subscriber-level permissions or above, to update the user metas arbitrarily. The meta value can only be a string.
Published: 2023-07-27T06:54:16.133Z
Updated: 2026-04-08T16:58:28.382Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.