Beveiligingsadvies

CVE-2023-1196

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-02 08:39:29

Laatst bijgewerkt 2025-01-30 14:21:42

Toegewezen door WPScan

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.

← Alle CVE's bekijken Bekijk op cve.org ↗