GCVE - cpe:2.3:a:mattkeys:advanced_custom_fields:_font_awesome

Approved changes feed: RSS · Atom

cpe:2.3:a:mattkeys:advanced_custom_fields:_font_awesome_field:*:*:*:*:*:*:*:*

part: a version: _font_awesome_field update: *

Vendor	Mattkeys (`e359d45e-2239-5b96-a546-acac65b4b9ff`)
Product	Advanced Custom Fields (`b805a3fa-b9af-5d39-b707-1dc97804f514`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-14983`	vulnerable	2026-06-08 07:06:35.483090	Advanced Custom Fields: Font Awesome <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting MEDIUM (6.4) The Advanced Custom Fields: Font Awesome Field plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible forauthenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts that execute in a victim's browser. Published: 2026-02-19T04:36:22.512Z Updated: 2026-04-08T17:20:43.304Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/c495d7f6-6d4a-4b1a-90f9-5273e7773d7a?source=cve https://plugins.svn.wordpress.org/advanced-custom-fields-font-awesome/trunk/fields/acf-font-awesome-v6.php#L332 https://plugins.svn.wordpress.org/advanced-custom-fields-font-awesome/trunk/fields/acf-font-awesome-v6.php#L337 https://plugins.svn.wordpress.org/advanced-custom-fields-font-awesome/trunk/fields/acf-font-awesome-v6.php#L361 https://plugins.svn.wordpress.org/advanced-custom-fields-font-awesome/trunk/fields/acf-font-awesome-v6.php#L374	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.