6.6
Moyenne
CVE-2024-9529 The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced…
Description
The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from running arbitrary functions through its setting import functionalities, which could allow high privilege users such as admin to run arbitrary PHP functions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Secure Custom Fields 6.3 | premières → < 6.3.6.3 | 6.3.6.3 |
| Advanced Custom Fields Pro 6.3 | premières → < 6.3.9 | 6.3.9 |
| advanced_custom_field_pro 6.3 | premières → < 6.3.9 | 6.3.9 |
| advanced_custom_fields 6.3 | premières → < 6.3.9 | 6.3.6.3 |
Autres CVE de Secure Custom Fields
Les 6 CVE de Secure Custom Fields →
CVE-2026-97195
Secure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field Definition
Non notée
CVE-2026-97194
Secure Custom Fields < 6.9.8 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields
Non notée
CVE-2026-97193
Secure Custom Fields < 6.9.8 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR
Non notée
CVE-2026-97192
Secure Custom Fields < 6.9.8 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path
Non notée