CVE-2026-97191
2026-11-07
06h00 +00:00
06h00 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
Advanced Custom Fields < 6.8.11 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path
The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not re-apply its field-group location rules when persisting values submitted through the post editor save path, allowing users with contributor-level access and above to write custom fields the site restricted to administrators onto their own posts.CVE 資訊
參考資料
https://wpscan.com/vulnerability/3eb847d4-6649-4f71-8dc7-e739a6317409/
Tags : exploit, vdb-entry, technical-description
Tags : exploit, vdb-entry, technical-description
