CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-37251

WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

Status: Published
Published: 2024-12-16
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in WPENGINE, INC. Advanced Custom Fields PRO.This issue affects Advanced Custom Fields PRO: from n/a before 6.3.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WPENGINE, INC. Advanced Custom Fields PRO

Default version status: unaffected

n/a to < 6.3.2affected

References

https://patchstack.com/database/wordpress/plugin/advanced-custom-fields-pro/vulnerability/wordpress-advanced-custom-fields-pro-plugin-6-3-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve ↗