Skip to content
Threat Feed

Product

Advanced Custom Fields: Extended Plugin <= 0.9.2.5

1 brief RSS
critical advisory

CVE-2026-8809: Advanced Custom Fields: Extended WordPress Plugin Privilege Escalation

The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation (CVE-2026-8809), allowing an unauthenticated attacker to create an administrator-level user by bypassing validation in versions up to 0.9.2.5 if a specific form is exposed.

Advanced Custom Fields: Extended plugin <= 0.9.2.5 privilege-escalation wordpress acf acfe cloud
2r 1t 1c