Threats tagged 'ghsa-86cg-5348-hfwg'

CVE-2026-66678 is a medium severity vulnerability in the Advanced Custom Fields: Font Awesome Field plugin by Justin Kruit. It involves missing authorization (CWE-862) in versions up to and including 6.1.1. This flaw could allow users with limited privileges to access functionality or data they should not be authorized to use. No official patch or remediation guidance has been provided yet, and there are no known exploits in the wild.