CVE Database /
CVE-2026-8382
CVE · Medium
CVE-2026-8382 — Advanced Custom Fields (ACF®) [advanced-custom-fields] < 6.8.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-8382
|
Advanced Custom Fields (ACF®) [advanced-custom-fields] < 6.8.2 |
Missing Authorization |
Medium
5.3
|
< 6.8.2
|
6.8.2 |
2026-05-30 |
—
|
CVE-2026-8382
The Advanced Custom Fields plugin for WordPress is susceptible to an authorization bypass vulnerability in all versions up to 6.8.1, as it fails to adequately verify user permissions for certain actions. This flaw allows unauthenticated attackers to modify the post_title and post_content of any accessible post by submitting form data with manipulated _post_title and _post_content parameters.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings