PricingCase studies Login Start trial
Plugin Icon

Advanced Custom Fields: Extended

Konrad Chmielewski

Developer

0.9.2.3

Latest version

100,000

Installations

No date

Last updated

WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
    VulnerabilitiesSecurity Contributors

Vulnerability history

0 present
4 fixed
3 Mitigation rules
  • Unauthenticated Privilege Escalation via Insert User Form Action vulnerability
    <= 0.9.2.1
    3 hours ago
  • Unauthenticated Remote Code Execution vulnerability
    0.9.0.5-0.9.1.1
    Dec 3, 2025
  • Auth. Stored Cross-Site Scripting (XSS) vulnerability
    <= 0.8.9.3
    Sep 29, 2023
  • SQL Injection (SQLi) vulnerability
    <= 0.8.8.6
    Dec 23, 2021

Vulnerability mitigation

  • Pricing
  • Application security (SCA)
  • RapidMitigate New
  • Threat Intelligence (API)
  • VS Monarx
  • VS Imunify360
  • VS Wordfence
  • Documentation
  • Service status
  • Log in

Code security

  • Managed VDP New
  • Active VDP directory 1,122
  • Security auditing
  • Compliance (CRA) New
  • Log in New

Bug bounty

  • Bug bounty
  • Leaderboard
  • Guidelines
  • Learn New
  • Report
  • Discord
  • Log in New

Use cases

  • Web developers
  • Webhosts New
  • Software vendors
  • WordPress
  • WooCommerce

Resources

  • Partners
  • Vulnerability database
  • Whitepaper 2025 New
  • Articles
  • Case studies New
  • Webinars New
  • Vulnerability statistics

Patchstack

  • About
  • Careers
  • Merch store
  • Media kit
  • LinkedIn
  • Facebook
  • X
© 2026 Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions