Known vulnerabilities in wpengine Advanced Custom Fields (ACF®)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-8382 | The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to,… | 5.3 Medium | May 31, 2026 |
| CVE-2026-4812 | The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Missing Authorization to Arbitrary Post/Page… | 5.3 Medium | Apr 15, 2026 |
| CVE-2023-6701 | The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text… | 6.4 Medium | Feb 5, 2024 |