CVE-2026-94267 | Advanced Custom Fields Extended Plugin prior 0.9.2.8 on WordPress code injection

October 23, 2026 Yanac

A vulnerability was found in Advanced Custom Fields Extended Plugin and Advanced Custom Fields Extended PRO Plugin on WordPress. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to code injection.

This vulnerability is traded as CVE-2026-94267. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More