Not rated

CVE-2021-20867 Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing…

Description

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in moving the field group which may allow a user to move the unauthorized field group via unspecified vectors.

Affected products and versions

Product	Affected versions	Fixed in
Advanced Custom Fields and Advanced Custom Fields Pro	Versions not published

The 3 CVEs of Advanced Custom Fields and Advanced Custom Fields Pro →

CVE-2021-20866 Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing… Not rated CVE-2021-20865 Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing… Not rated

Do you use Advanced Custom Fields and Advanced Custom Fields Pro?

Track this CVE Watch Advanced Custom Fields and Advanced Custom Fields Pro Check my SBOMs

www.cveye.io/en/cve/CVE-2021-20867

Timeline

Published December 13, 2021
Last modified August 3, 2024

References

www.advancedcustomfields.com www.advancedcustomfields.com
wordpress.org wordpress.org
jvn.jp jvn.jp

Track this CVE

CVE-2021-20867 Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing…

Description

Affected products and versions

Other CVEs of Advanced Custom Fields and Advanced Custom Fields Pro