Pricing
Case studies
Login
Start trial
ACF Extended
Konrad Chmielewski
Developer
0.9.2.8
Latest version
100,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
16 patched
10 Mitigation rules
Unauthenticated Non-Administrator Account Takeover vulnerability
0.9.2.7
1 hour ago
Unauthenticated RCE vulnerability
< 0.9.2.8
1 hour ago
Unauthenticated Administrator Account Takeover vulnerability
0.9.2.7
1 hour ago
Contributor+ XSS vulnerability
0.8.9.4-0.9.2.7
2 hours ago
Cross Site Scripting (XSS) vulnerability
<= 0.9.2.7
2 days ago
Arbitrary File Deletion vulnerability
<= 0.9.2.7
3 days ago
Broken Access Control vulnerability
<= 0.9.2.7
3 days ago
Unauthenticated Administrator Account Takeover vulnerability
< 0.9.2.7
03/09/2026
Unauthenticated Privilege Escalation vulnerability
0.9.2.2-0.9.2.6
03/09/2026
Broken Access Control vulnerability
<= 0.9.2.6
27/08/2026
Unauthenticated Privilege Escalation vulnerability
<= 0.9.2.5
01/06/2026
Unauthenticated Arbitrary Shortcode Execution vulnerability
<= 0.9.2.3
13/05/2026
Unauthenticated Privilege Escalation via Insert User Form Action vulnerability
<= 0.9.2.1
20/01/2026
Unauthenticated Remote Code Execution vulnerability
0.9.0.5-0.9.1.1
03/12/2025
Auth. Stored Cross-Site Scripting (XSS) vulnerability
<= 0.8.9.3
29/09/2023
SQL Injection (SQLi) vulnerability
<= 0.8.8.6
23/12/2021