Pricing
Case studies
Login
Start trial
ACF Extended
Konrad Chmielewski
Developer
0.9.2.8
Latest version
100,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
19 patched
11 Mitigation rules
Missing Authorization to Unauthenticated Arbitrary Attachment Deletion vulnerability
<= 0.9.2.6
2 days ago
Missing Authorization to Unauthenticated Data Exposure vulnerability
<= 0.9.2.7
3 days ago
Unauthenticated Arbitrary Shortcode Execution vulnerability
0.9.2.4-0.9.2.7
3 days ago
Unauthenticated Non-Administrator Account Takeover vulnerability
0.9.2.7
7 days ago
Unauthenticated RCE vulnerability
< 0.9.2.8
7 days ago
Unauthenticated Administrator Account Takeover vulnerability
0.9.2.7
7 days ago
Contributor+ XSS vulnerability
0.8.9.4-0.9.2.7
7 days ago
Cross Site Scripting (XSS) vulnerability
<= 0.9.2.7
20/10/2026
Arbitrary File Deletion vulnerability
<= 0.9.2.7
20/10/2026
Broken Access Control vulnerability
<= 0.9.2.7
20/10/2026
Unauthenticated Administrator Account Takeover vulnerability
< 0.9.2.7
03/09/2026
Unauthenticated Privilege Escalation vulnerability
0.9.2.2-0.9.2.6
03/09/2026
Broken Access Control vulnerability
<= 0.9.2.6
27/08/2026
Unauthenticated Privilege Escalation vulnerability
<= 0.9.2.5
01/06/2026
Unauthenticated Arbitrary Shortcode Execution vulnerability
<= 0.9.2.3
13/05/2026
Unauthenticated Privilege Escalation via Insert User Form Action vulnerability
<= 0.9.2.1
20/01/2026
Unauthenticated Remote Code Execution vulnerability
0.9.0.5-0.9.1.1
03/12/2025
Auth. Stored Cross-Site Scripting (XSS) vulnerability
<= 0.8.9.3
29/09/2023
SQL Injection (SQLi) vulnerability
<= 0.8.8.6
23/12/2021