CVE-2022-40696: Advancedcustomfields Advanced Custom Fields

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2.

Affected products

• Advancedcustomfields Advanced Custom Fields: from 3.1.1, up to and including 6.0.2

Published 2024-01-08. Last modified 2026-06-17.