CVE-2026-94262 | Advanced Custom Fields Extended prior 0.9.2.8 on WordPress Forms authorization

October 23, 2026 Yanac

A vulnerability classified as critical was found in Advanced Custom Fields Extended and Advanced Custom Fields Extended PRO Plugin on WordPress. The impacted element is an unknown function of the component Forms Module. The manipulation results in incorrect authorization.

This vulnerability is identified as CVE-2026-94262. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More