Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.

The WordPress Advanced Custom Fields Pro Plugin installed on the remote host is affected by a Cross-Site Scripting.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The WordPress Advanced Custom Fields Plugin installed on the remote host is affected by a Cross-Site Scripting.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
113909	Advanced Custom Fields Pro for WordPress < 5.12.6 Cross-Site Scripting	Web App Scanning	Component Vulnerability	medium
113908	Advanced Custom Fields Pro for WordPress 6.0.x < 6.1.6 Cross-Site Scripting	Web App Scanning	Component Vulnerability	medium
113907	Advanced Custom Fields for WordPress < 5.12.6 Cross-Site Scripting	Web App Scanning	Component Vulnerability	medium
113906	Advanced Custom Fields for WordPress 6.0.x < 6.1.6 Cross-Site Scripting	Web App Scanning	Component Vulnerability	medium

Detections

Analytics

CVE-2023-30777

medium

Tenable Plugins

medium

medium

medium

medium