CVE-2024-9529 - "WordPress Secure Custom Fields & Advanced Custom Fields Pro PHP Code Injection"

CVE ID : CVE-2024-9529
Published : Nov. 15, 2024, 7:15 a.m. | 24 minutes ago
Description : The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from running arbitrary functions through its setting import functionalities, which could allow high privilege users such as admin to run arbitrary PHP functions.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...