WordPress plugin
ACF Quick Edit Fields security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All ACF Quick Edit Fields vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Authenticated (Contributor+) Insecure Direct Object Reference ≤3.2.2Update to 3.2.3 | CVE-2023-7286 |
- Medium6.5Authenticated (Contributor+) Insecure Direct Object Reference
≤3.2.2Update to 3.2.3
ACF Quick Edit Fields: common questions
Does ACF Quick Edit Fields have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in ACF Quick Edit Fields: 1 medium. None are known to affect version null.
How do I check which version of ACF Quick Edit Fields I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent ACF Quick Edit Fields vulnerability?
CVE-2023-7286, published Dec 5, 2022: ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference. Severity: Medium (CVSS 6.5).
Is any ACF Quick Edit Fields vulnerability listed in CISA KEV?
No. None of the known ACF Quick Edit Fields vulnerabilities is currently listed in the CISA KEV catalog.