<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: advanced-custom-fields-extended</title><description>Every new CVE for advanced-custom-fields-extended.</description><link>https://agentprime.io/</link><item><title>CVE-2026-94263: Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message</title><link>https://agentprime.io/advisories/CVE-2026-94263/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94263/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 10:44:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94268: Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action</title><link>https://agentprime.io/advisories/CVE-2026-94268/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94268/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 06:00:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94267: Advanced Custom Fields: Extended &lt; 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action</title><link>https://agentprime.io/advisories/CVE-2026-94267/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94267/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 06:00:21 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-94264: Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes</title><link>https://agentprime.io/advisories/CVE-2026-94264/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94264/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 06:00:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-94262: Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action</title><link>https://agentprime.io/advisories/CVE-2026-94262/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94262/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 06:00:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-80467: Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action</title><link>https://agentprime.io/advisories/CVE-2026-80467/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-80467/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 06:00:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-12526: Advanced Custom Fields: Extended &lt; 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action</title><link>https://agentprime.io/advisories/CVE-2026-12526/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-12526/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Sep 2026 06:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-24865: Advanced Custom Fields: Extended &lt; 0.8.8.7 - Admin+ SQL Injection</title><link>https://agentprime.io/advisories/CVE-2021-24865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-24865/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 24 Jan 2022 08:00:52 GMT</pubDate><category>CVE</category></item></channel></rss>