- Son 7 gün
- CWE-862
CVE-2026-2839
Advanced Custom Fields: Extended <= 0.9.2.7 - Missing Authorization to Unauthenticated Data Exposure via Multiple AJAX Endpoints
- Yayımlandı
- Güncellendi
- 28 Eki 2026
- Açık yaşı
- 0 gün
- Kaydı açan
- Wordfence
Özet
Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to unauthorized access of data and triggering of server-side actions in all versions up to, and including, 0.9.2.7. This is due to multiple AJAX handlers registered for unauthenticated users (wp_ajax_nopriv_*) that fail to implement proper current_user_can() authorization checks. While these handlers use ACF's acf_verify_ajax() function to validate cryptographic nonces, the acf_nonce values are generated for guest users and publicly exposed in the page source of any frontend page utilizing an ACF form. This makes it possible for unauthenticated attackers to extract the guest nonce and bypass WordPress visibility permissions, leading to the unauthorized disclosure of post titles and internal Flexible Content layout structures. The vulnerability was partially patched in version 0.9.2.4.
Etkilenen sürümler1 yazılım
| Yazılım | Etkilenen | Düzeltildiği sürüm |
|---|---|---|
| hwk-fr Advanced Custom Fields: Extended | ≤ 0.9.2.7 | – |
Kaynaklar9 kaynak
- CVE.org kaydı
- NVD kaydı
- wordfence.com/…lities/id/9954ef37-bae0-48fb-9654-ff54750c46c2 Diğer
- plugins.trac.wordpress.org/…/trunk/includes/fields/field-advanced-link.php Diğer
- plugins.trac.wordpress.org/…/trunk/includes/fields/field-advanced-link.php Diğer
- plugins.trac.wordpress.org/…cludes/fields/field-flexible-content-async.php Diğer
- plugins.trac.wordpress.org/…cludes/fields/field-flexible-content-async.php Diğer
- plugins.trac.wordpress.org/changeset/3516027 Diğer
- plugins.trac.wordpress.org/changeset/3754818 Diğer
Kayıt geçmişi
- Yayımlandı