Approved changes feed: RSS · Atom

cpe:2.3:a:wpengine_inc:advanced_custom_fields_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpengine Inc (10f5d9d3-de78-55e6-9133-e089f6c04c3d)
ProductAdvanced Custom Fields Pro (c8a14ba0-8905-5f5e-a6aa-4807afaa37e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-34762 vulnerable 2026-06-08 06:37:34.987375 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability
CRITICAL (9.9)
Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10.
Published: 2024-06-10T15:38:40.493Z
Updated: 2026-04-28T16:09:50.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34761 vulnerable 2026-06-08 06:37:34.986207 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability
HIGH (8.5)
Vulnerability discovered by executing a planned security audit. Improper Control of Generation of Code ('Code Injection') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows Code Injection.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10.
Published: 2024-06-10T15:34:32.438Z
Updated: 2026-04-28T16:09:50.172Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.