Security Advisory

CVE-2024-37249

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-11-01 14:18:40
Last updated 2026-04-28 16:09:57
Assigner Patchstack
CVSS score 4.3
State PUBLISHED

Description

Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1.