Unknown Wc Fields Factory vulnerabilities

2 CVEs affecting Unknown Wc Fields Factory, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-93508, published 2026-09-23.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-93508, published 2026-09-23. High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days. The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to its field-management AJAX action, allowing authenticated users with Subscriber-level access and above to…
• CVE-2026-93507, published 2026-09-23. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. The WC Fields Factory WordPress plugin before 4.1.11 does not properly restrict access to, or verify a nonce for, a post-cloning action, allowing Contributor-level users and above to duplicate…