CVE-2026-110813 | Advanced Custom Fields Plugin up to 6.8.10 on WordPress Comment cross site scripting

November 6, 2026 Yanac

A vulnerability has been found in Advanced Custom Fields Plugin up to 6.8.10 on WordPress and classified as problematic. This issue affects some unknown processing of the component Comment Handler. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-110813. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More