https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:11:53.150457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-323206 EUVD-2026-323206 2026-10-06T06:11:53.197230+00:00 EUVD-2026-323206 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8382 fkie_cve-2026-8382 2026-10-06T06:11:53.197270+00:00

The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the post_title and post_content of any post bound to a publicly accessible acf_form() instance by injecting values into the _post_title and _post_content parameters of a form submission request.

 https://cve.radiocsirt.org/vuln/ghsa-mqv8-cjf6-jmc9 GHSA-mqv8-cjf6-jmc9 2026-10-06T06:11:53.197306+00:00

The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the post_title and post_content of any post bound to a publicly accessible acf_form() instance by injecting values into the _post_title and _post_content parameters of a form submission request.