← Database

CVE-2022-23183

MEDIUM CVSS: 6.5 Published: 2022-03-31 Modified: 2026-06-17

Description

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission.

Affected Platforms

Advancedcustomfields Advanced Custom Fields

Weakness Type

CWE-862

References