Veille CVE

Jeudi 22 octobre 2026

3 CVE

  1. CVE-2026-112313 7.1 Élevée

    ACF Extended

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7.

  2. CVE-2026-112312 7.5 Élevée

    ACF Extended

    Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extended: from n/a through 0.9.2.7.

  3. CVE-2026-112311 6.5 Moyenne

    ACF Extended

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF Extended ACF Extended acf-extended allows Path Traversal.This issue affects ACF Extended: from n/a through 0.9.2.7.