Security Advisory

CVE-2023-1196

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-05-02 08:39:29

Last updated 2025-01-30 14:21:42

Assigner WPScan

State PUBLISHED

Description

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.

← Browse all CVEs View on cve.org ↗