Todo Advanced Custom Fields vulnerabilities

1 known vulnerability affecting todo/advanced_custom_fields.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2022-2594HIGHCVSS 8.8≥ 5.0, < 5.0*≥ 5.12.3, < 5.12.32022-08-22

CVE-2022-2594 [HIGH] CWE-434 CVE-2022-2594: The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plug The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 allows unauthenticated users to upload files allowed in a default WP configuration (so PHP is not possible) if there is a frontend form available. This vulnerability was introduced in the 5.0 rewrite and did not exist prior to that releas