CVE-2026-97190 | Advanced Custom Fields Plugin up to 6.8.10 on WordPress Synchronization authorization

November 7, 2026 Yanac

A vulnerability described as problematic has been identified in Advanced Custom Fields Plugin up to 6.8.10 on WordPress. This issue affects some unknown processing of the component Synchronization. Such manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-97190. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More