Threats tagged 'ghsa-3r78-26qx-3q7m'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	–	CVE-2026-97189The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not perform a read-permission check when it Medium2026-11-07GCVE DatabaseCVE-2026-97189 The Advanced Custom Fields (ACF®) WordPress plugin versions prior to 6.8.11 lack a read-permission check when rendering and formatting relational field values. This flaw allows users with post-editing capabilities (Contributor role and above) to view titles and non-public statuses of unpublished posts owned by other users. Report on CVE-2026-97189 Vulnerability #ghsa-3r78-26qx-3q7m	GCVE Database	2026-11-07

Page 1 of 1