CVE-2022-23183: Advancedcustomfields Advanced Custom Fields

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission.

Affected products

• Advancedcustomfields Advanced Custom Fields: before 5.12.1 (fixed in 5.12.1)

Published 2022-03-31. Last modified 2026-06-17.