WordPress plugin
Advanced Custom Fields: Font Awesome Field security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All Advanced Custom Fields: Font Awesome Field vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤6.1.2Update to 6.1.3 | CVE-2026-66678 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤5.0.2Update to 6.0.0 | CVE-2026-49044 | |
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting via JSON Field ≤5.0.2Update to 6.0.0 | CVE-2026-6415 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤5.0.1Update to 5.0.2 | CVE-2025-14983 |
- Medium4.3Missing Authorization
≤6.1.2Update to 6.1.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤5.0.2Update to 6.0.0
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting via JSON Field
≤5.0.2Update to 6.0.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤5.0.1Update to 5.0.2
Advanced Custom Fields: Font Awesome Field: common questions
Does Advanced Custom Fields: Font Awesome Field have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Advanced Custom Fields: Font Awesome Field: 4 medium. None are known to affect version null.
How do I check which version of Advanced Custom Fields: Font Awesome Field I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Advanced Custom Fields: Font Awesome Field vulnerability?
CVE-2026-66678, published Aug 6, 2026: Advanced Custom Fields: Font Awesome Field <= 6.1.2 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Advanced Custom Fields: Font Awesome Field vulnerability listed in CISA KEV?
No. None of the known Advanced Custom Fields: Font Awesome Field vulnerabilities is currently listed in the CISA KEV catalog.