CVE-2026-94268 | Advanced Custom Fields Extended prior 0.9.2.8 on WordPress Front-End Forms update-user privileges management

October 23, 2026 Yanac

A vulnerability was found in Advanced Custom Fields Extended and Advanced Custom Fields Extended PRO Plugin on WordPress. It has been classified as critical. This impacts the function update-user of the component Front-End Forms Module. Performing a manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-94268. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More