CVE-2026-120534 | ACF Extended Advanced Custom Fields Extended PRO Plugin up to 0.9.2.6 on WordPress Render Field render_field code injection

SecurityVulns
Yanac

A vulnerability labeled as critical has been found in ACF Extended Advanced Custom Fields Extended PRO Plugin up to 0.9.2.6 on WordPress. Impacted is the function render_field of the component Render Field. Such manipulation leads to code injection.

This vulnerability is referenced as CVE-2026-120534. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More