← Back

Advanced Custom Fields\

advanced_custom_fields\

Vendor: Acf Extended • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24865
1Acf Extended
1Advanced Custom Fields\
Jun 17, 2026
Jan 24, 2022
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The Advanced Custom Fields: Extended WordPress plugin before 0.8.8.7 does not validate the order and orderby parameters before using them in a SQL statement, leading to a SQL Injection issue