https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:31:43.630340+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-1196 CVE-2023-1196 — Advanced Custom Fields - Contributor+ PHP Object Injection 2026-10-06T08:31:43.632266+00:00

Affected: Unknown Advanced Custom Fields (ACF), Unknown Advanced Custom Fields (ACF) Pro

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.