CVE-2026-2839 | hwk-fr Advanced Custom Fields Extended Plugin up to 0.9.2.7 on WordPress AJAX handler acf_verify_ajax acf_nonce improper authorization

SecurityVulns
Yanac

A vulnerability, which was classified as critical, has been found in hwk-fr Advanced Custom Fields Extended Plugin up to 0.9.2.7 on WordPress. This affects the function acf_verify_ajax of the component AJAX handler. Performing a manipulation of the argument acf_nonce results in improper authorization.

This vulnerability was named CVE-2026-2839. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More