Advanced Custom Fields (ACF), CVE-2025-54940

CVE, Research URL: CVE-2025-54940
Home page URL: Security reports for Advanced Custom Fields (ACF)
Application: Advanced Custom Fields (ACF)
Published on: Aug 08, 2025
Research Description: An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may be rendered and page display may be tampered.
Affected versions: Min -, max 6.4.3.
Status: vulnerable