Threats tagged 'ghsa-32f3-wpx7-chp4'

The Advanced Custom Fields (ACF®) WordPress plugin versions before 6.8.11 have a vulnerability where field-group location rules are not re-applied when saving values through the post editor. This allows users with contributor-level access and above to write custom fields that are normally restricted to administrators onto their own posts.