Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:33:55 +0000 CVE-2023-1196 — Advanced Custom Fields - Contributor+ PHP Object Injection https://cve.radiocsirt.org/vuln/cve-2023-1196 <p><strong>Affected:</strong> Unknown Advanced Custom Fields (ACF), Unknown Advanced Custom Fields (ACF) Pro</p> <p>The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.</p> <p><strong>Affected:</strong> Unknown Advanced Custom Fields (ACF), Unknown Advanced Custom Fields (ACF) Pro</p> <p>The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow users with a role of Contributor and above to perform PHP Object Injection when a suitable gadget is present.</p> https://cve.radiocsirt.org/vuln/cve-2023-1196