agentprime: hwk-fr-advanced-custom-fields-extendedEvery new CVE for hwk-fr-advanced-custom-fields-extended.https://agentprime.io/CVE-2026-110305: Advanced Custom Fields: Extended <= 0.9.2.7 - Unauthenticated Sensitive Information Exposure in 'acf[<mapped_field>]' Parameter via {get_user} Template Tag Injectionhttps://agentprime.io/advisories/CVE-2026-110305/https://agentprime.io/advisories/CVE-2026-110305/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:15:26 GMTCVECVE-2026-2839: Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpointshttps://agentprime.io/advisories/CVE-2026-2839/https://agentprime.io/advisories/CVE-2026-2839/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 06:45:17 GMTCVECVE-2026-10752: Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Fieldhttps://agentprime.io/advisories/CVE-2026-10752/https://agentprime.io/advisories/CVE-2026-10752/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 11:32:04 GMTCVECVE-2026-8809: Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameterhttps://agentprime.io/advisories/CVE-2026-8809/https://agentprime.io/advisories/CVE-2026-8809/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 22:27:27 GMTCVEcriticalCVE-2025-15463: Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Executionhttps://agentprime.io/advisories/CVE-2025-15463/https://agentprime.io/advisories/CVE-2025-15463/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 22:24:25 GMTCVECVE-2025-14533: Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Actionhttps://agentprime.io/advisories/CVE-2025-14533/https://agentprime.io/advisories/CVE-2025-14533/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Jan 2026 09:25:00 GMTCVEcriticalCVE-2025-13486: Advanced Custom Fields: Extended 0.9.0.5 - 0.9.1.1 - Unauthenticated Remote Code Execution in prepare_formhttps://agentprime.io/advisories/CVE-2025-13486/https://agentprime.io/advisories/CVE-2025-13486/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.69 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Dec 2025 06:47:46 GMTCVEcriticalCVE-2023-5292: Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodehttps://agentprime.io/advisories/CVE-2023-5292/https://agentprime.io/advisories/CVE-2023-5292/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Oct 2023 07:29:35 GMTCVE