cbcvebase.

Advanced Custom Fields Wordpress Plugin vulnerabilities

1 known vulnerability affecting advanced_custom_fields/wordpress_plugin.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2012-10025P2CRITICALCVSS 10.0PoC≤ 3.5.12025-08-05
CVE-2012-10025 [CRITICAL] CWE-98 CVE-2012-10025: The WordPress plugin Advanced Custom Fields (ACF) version 3.5.1 and below contains a remote file inc The WordPress plugin Advanced Custom Fields (ACF) version 3.5.1 and below contains a remote file inclusion (RFI) vulnerability in core/actions/export.php. When the PHP configuration directive allow_url_include is enabled (default: Off), an unauthenticated attacker can exploit the acf_abspath POST parameter to include and execute arbitrary remote PH
nvd
Advanced Custom Fields Wordpress Plugin vulnerabilities | cvebase