Advanced Custom Fields versions prior to 5.11 and... · CVE-2021-20866 · GitHub Advisory Database · GitHub

Advanced Custom Fields versions prior to 5.11 and...

Moderate severity Unreviewed Published Dec 14, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in obtaining the user list which may allow a user to obtain the unauthorized information via unspecified vectors.

References

Published by the National Vulnerability Database

Dec 13, 2021

Published to the GitHub Advisory Database Dec 14, 2021

Last updated Feb 1, 2023