How many advancedcustomfields WordPress Plugin CVEs are in CISA KEV?

None of advancedcustomfields WordPress Plugin's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for advancedcustomfields WordPress Plugin vulnerabilities?

Yes — 1 of advancedcustomfields WordPress Plugin's CVEs have a known public exploit.

Which versions of advancedcustomfields WordPress Plugin are affected?

2 distinct advancedcustomfields WordPress Plugin versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in advancedcustomfields WordPress Plugin CVEs?

advancedcustomfields WordPress Plugin's CVEs most often map to these CWE weakness types: CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

What is the average severity of advancedcustomfields WordPress Plugin CVEs?

The average CVSS base score across advancedcustomfields WordPress Plugin's scored CVEs is 10.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

advancedcustomfields

1 CVEs

advancedcustomfields WordPress Plugin Vulnerabilities

Name: advancedcustomfields WordPress Plugin vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WordPress Plugin by advancedcustomfields.

1

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

10.0

Avg CVSS

2025–2025

Last updated August 5, 2025

Overview

advancedcustomfields WordPress Plugin has 1 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 10.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting advancedcustomfields WordPress Plugin, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of advancedcustomfields WordPress Plugin's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of advancedcustomfields WordPress Plugin's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of advancedcustomfields WordPress Plugin's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every advancedcustomfields WordPress Plugin version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 3.5.11 CVE

Fixed in

> 3.5.11 CVE

Find a version

1 CVE

Sort

WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File Inclusion
CVE-2012-10025
Public exploit
Patch
CWE-98
Critical · CVSS 10.0
EPSS 1.3% (67th pct)2025-08-05

Common weakness types

The CWE weakness categories most often found in advancedcustomfields WordPress Plugin CVEs. Follow any weakness for its full explanation.

CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1 CVE

Other advancedcustomfields products

Browse vulnerabilities for other products by advancedcustomfields.

advanced custom fields16 CVEs acf fronted display1 CVEs WordPress Plugin Advanced Custom Fields1 CVEs

All advancedcustomfields vulnerabilities

Frequently asked questions

Common questions about advancedcustomfields WordPress Plugin vulnerabilities.

How many CVEs does advancedcustomfields WordPress Plugin have?: advancedcustomfields WordPress Plugin has 1 published CVE records since 2025.
How many advancedcustomfields WordPress Plugin CVEs are in CISA KEV?: None of advancedcustomfields WordPress Plugin's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for advancedcustomfields WordPress Plugin vulnerabilities?: Yes — 1 of advancedcustomfields WordPress Plugin's CVEs have a known public exploit.
Which versions of advancedcustomfields WordPress Plugin are affected?: 2 distinct advancedcustomfields WordPress Plugin versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in advancedcustomfields WordPress Plugin CVEs?: advancedcustomfields WordPress Plugin's CVEs most often map to these CWE weakness types: CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
How many critical advancedcustomfields WordPress Plugin vulnerabilities are there?: advancedcustomfields WordPress Plugin has 1 critical and 0 high-severity CVEs.
What is the average severity of advancedcustomfields WordPress Plugin CVEs?: The average CVSS base score across advancedcustomfields WordPress Plugin's scored CVEs is 10.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track advancedcustomfields WordPress Plugin vulnerabilities

Monitor new advancedcustomfields WordPress Plugin vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing