Threats tagged 'ghsa-rxjg-4wwx-r4pf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-97190The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not verify that a user is allowed to edit the High2026-11-07GCVE DatabaseCVE-2026-97190 The Advanced Custom Fields (ACF®) WordPress plugin versions before 6.8.11 contain a vulnerability where the plugin does not verify user permissions before modifying bidirectional relationship fields. This allows users with contributor-level access or higher to add or remove references to their own objects on posts, users, or terms they cannot normally edit. Report on CVE-2026-97190 Vulnerability #ghsa-rxjg-4wwx-r4pf	GCVE Database	2026-11-07

Page 1 of 1