CVE-2026-112311

LOWCVSS 6.5 · MEDIUM

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF Extended ACF Extended acf-extended allows Path Traversal.This issue affects ACF Extended: from n/a through 0.9.2.7.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/acf-extended/vulnerability/wordpress-acf-extended-plugin-0-9-2-7-arbitrary-file-deletion-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

Donweb Media@DonwebMedia22h
Si usás ACF Extended en 0.9.2.7, ojo: encontraron un path traversal que permite borrar archivos sin estar logueado. Ya hay parche en 0.9.2.8, no lo dejes para después 🔓 https://seguridadenwordpress.com/vulnerabilidad-acf-extended-path-traversal-cve-2026-112311/
0000029
9 followersView on X

Explore more

Back to dashboard