WP Engine Advanced Custom Fields (ACF) vulnerabilities

Latest WP Engine Advanced Custom Fields (ACF) CVEs

Newest publication first

1. CVE-2022-40696 WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure

   Published 2024-01-08

   High·CVSS 7.5 EPSS 0.52%

   Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.