Vulnerabilities > CVE-2023-1196 - Unspecified vulnerability in Advancedcustomfields Advanced Custom Fields

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
advancedcustomfields

Summary

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.

Vulnerable Configurations

Part Description Count
Application
Advancedcustomfields
170