Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 17
Reset filtersAdvanced Custom Fields <= 6.3.8 - Authenticated (Admin+) Limited Arbitrary Function Call
Advanced Custom Fields <= 6.3.5 - Authenticated Stored Cross-Site Scripting
Advanced Custom Fields PRO < 6.3.2 - Missing Authorization
Advanced Custom Fields Pro <= 6.3.1 - Cross-Site Request Forgery
Advanced Custom Fields Pro <= 6.3.1 - Missing Authorization
Advanced Custom Fields <= 6.2.10 - Authenticated (Contributor+) Arbitrary Custom Field Access
Advanced Custom Fields Pro <= 6.2.9 - Authenticated (Contributor+) Local File Inclusion
Advanced Custom Fields Pro <= 6.2.9 - Authenticated (Contributor+) Code Injection
Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field
Advanced Custom Fields PRO 6.1 - 6.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Advanced Custom Fields (Free and Pro) 5.8.10 to 5.12.5 & 6.0.0 to 6.1.5 - Reflected Cross-Site Scripting via 'post_status'
Advanced Custom Fields <= 5.12 - Authenticated Information Disclosure
Advanced Custom Fields <= 5.10 - Missing Authorization to Information Disclosure
Advanced Custom Fields <= 5.10 - Missing Authorization to Information Disclosure
Advanced Custom Fields <= 5.10 - Missing Authorization on Option Changes
Advanced Custom Fields Pro <= 5.9.0 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.