WPEngine Advanced Custom Fields
Moderate fix1 remedy
cpe:2.3:a:advancedcustomfields:advanced_custom_fields:*:*:*:*:wordpress:*:*
Moderate fix1 remedy
- < 6.4.3
WordPress Advanced Custom Fields Plugin HTML Injection Vulnerability
Vulnerability
Patched
A vulnerability allowing HTML injection has been identified in the WordPress plugin Advanced Custom Fields, affecting versions prior to 6.4.3. This vulnerability allows crafted HTML to be rendered, potentially tampering with the page display.
Impact
Exploitation of this vulnerability could lead to unauthorized HTML being injected and rendered, allowing for manipulation of the page's appearance.
Remediation
Users are advised to update the Advanced Custom Fields plugin to version 6.4.3 or later.
Added: Aug 8, 2025, 5:19 AM
Updated: Aug 8, 2025, 5:19 AM
Vulnerability Rating
Custom Algorithm
spread
6.4impact
1.7exploitability
4.7remediation
7.7relevance
0.3threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.