Pricing
Case studies
Login
Start trial
ACF Extended
Konrad Chmielewski
Developer
0.9.2.8
Latest version
100,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
18 patched
11 Mitigation rules
Missing Authorization to Unauthenticated Arbitrary Attachment Deletion vulnerability
<= 0.9.2.6
1 hour ago
Unauthenticated Arbitrary Shortcode Execution vulnerability
0.9.2.4-0.9.2.7
1 day ago
Unauthenticated Non-Administrator Account Takeover vulnerability
0.9.2.7
4 days ago
Unauthenticated RCE vulnerability
< 0.9.2.8
4 days ago
Unauthenticated Administrator Account Takeover vulnerability
0.9.2.7
4 days ago
Contributor+ XSS vulnerability
0.8.9.4-0.9.2.7
4 days ago
Cross Site Scripting (XSS) vulnerability
<= 0.9.2.7
7 days ago
Arbitrary File Deletion vulnerability
<= 0.9.2.7
7 days ago
Broken Access Control vulnerability
<= 0.9.2.7
7 days ago
Unauthenticated Administrator Account Takeover vulnerability
< 0.9.2.7
03/09/2026
Unauthenticated Privilege Escalation vulnerability
0.9.2.2-0.9.2.6
03/09/2026
Broken Access Control vulnerability
<= 0.9.2.6
27/08/2026
Unauthenticated Privilege Escalation vulnerability
<= 0.9.2.5
01/06/2026
Unauthenticated Arbitrary Shortcode Execution vulnerability
<= 0.9.2.3
13/05/2026
Unauthenticated Privilege Escalation via Insert User Form Action vulnerability
<= 0.9.2.1
20/01/2026
Unauthenticated Remote Code Execution vulnerability
0.9.0.5-0.9.1.1
03/12/2025
Auth. Stored Cross-Site Scripting (XSS) vulnerability
<= 0.8.9.3
29/09/2023
SQL Injection (SQLi) vulnerability
<= 0.8.8.6
23/12/2021