Acf Quick Edit Fields
Approved changes feed: RSS · Atom
cpe:2.3:a:podpirate:acf_quick_edit_fields:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Podpirate (cc3e261a-45bf-5a5e-8362-21ee07e20868) |
|---|---|
| Product | Acf Quick Edit Fields (915368b4-4ec3-5886-8603-4a2626115ece) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7286 |
vulnerable | 2026-06-08 06:21:57.491276 |
ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference
MEDIUM (6.5)
The plugin ACF Quick Edit Fields for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.2.2. This makes it possible for attackers without the edit_users capability to access metadata of other users, this includes contributor-level users and above.
Published: 2024-10-16T06:43:32.686Z
Updated: 2026-04-08T16:54:46.229Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.