4.3
Medium
CVE-2024-37251 Cross-Site Request Forgery (CSRF) vulnerability in WPENGINE, INC
Description
Cross-Site Request Forgery (CSRF) vulnerability in WPENGINE, INC. Advanced Custom Fields PRO.This issue affects Advanced Custom Fields PRO: from n/a before 6.3.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Advanced Custom Fields PRO 6.3 | earliest → < 6.3.2 | 6.3.2 |