Approved changes feed: RSS · Atom

cpe:2.3:a:justin_kruit:advanced_custom_fields:_font_awesome_field:*:*:*:*:*:*:*:*

part: a version: _font_awesome_field update: *

VendorJustin Kruit (ce07071f-e121-5a24-a5ad-ee1c5d556da3)
ProductAdvanced Custom Fields (5781152a-084a-5a01-8ffe-914ec6c33ff1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-66678 vulnerable 2026-09-16 04:32:55.089194 WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability
MEDIUM (4.3)
Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.
Published: 2026-08-06T14:27:56.721Z
Updated: 2026-08-06T15:35:31.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49044 vulnerable 2026-06-08 08:05:12.388454 WordPress Advanced Custom Fields: Font Awesome Field plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Kruit Advanced Custom Fields: Font Awesome Field allows Stored XSS. This issue affects Advanced Custom Fields: Font Awesome Field: from n/a through 5.0.2.
Published: 2026-05-27T14:46:17.551Z
Updated: 2026-05-27T16:07:03.872Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.