CVE-2026-97191 | Advanced Custom Fields Plugin up to 6.8.10 on WordPress Location Rules access control

November 7, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Advanced Custom Fields Plugin up to 6.8.10 on WordPress. Impacted is an unknown function of the component Location Rules. Executing a manipulation can lead to improper access controls.

This vulnerability appears as CVE-2026-97191. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More