CVE-2024-4565

MEDIUM 6.5CVE-2024-4565 · Published 20/06/2024 · updated 17/06/2026

In short

CVE-2024-4565 is a MEDIUM (CVSS 6.5) vulnerability affecting advanced custom fields (advancedcustomfields).
Chance of exploitation in the next 30 days (EPSS): 0.48%, higher than 41.4% of all vulnerabilities.
Fix: update to 6.3 or later.

Package	Affected versions	Patched versions
advanced custom fields advancedcustomfields	`< 6.3`	`6.3`

Description

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access

References

wpscan.com/vulnerability/430224c4-d6e3-4ca8-b1bc-b2229a9bcf12 · Exploit

More vulnerabilities in advanced custom fields

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

advanced custom fields

advancedcustomfields

< 6.3

6.3

More vulnerabilities in advanced custom fields

See all →