CVE-2026-12526 | Advanced Custom Fields Extended Plugin prior 0.9.2.7 on WordPress Front-End Forms improper authentication

September 2, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Advanced Custom Fields Extended Plugin on WordPress. Impacted is an unknown function of the component Front-End Forms Module. Performing a manipulation results in improper authentication.

This vulnerability is reported as CVE-2026-12526. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More