PLUGIN SECURITY
Is Advanced Custom Fields Table Field safe?
A Table Field Add-on for the Advanced Custom Fields and Secure Custom Fields Plugin.
What this plugin does
- Slug:
advanced-custom-fields-table-field - Author: Johann Heyne
- 50000+ active installs
- 98/100 rating (59 reviews on wordpress.org)
- 1166575 all-time downloads
- On WordPress.org since 2014-12-29
acfadvanced custom fieldsscfsecure custom fieldstable
Maintenance status
- Latest known version: 1.3.35
- Last updated: 2026-08-24 10:17am GMT
- Tested up to WordPress: 7.1.0
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Advanced Custom Fields Table Field. Reported between 2016 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-12067 | Table Field Add-on for ACF and SCF [advanced-custom-fields-table-field] < 1.3.31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.3.31 | 1.3.31 | 2026-01-05 | ✓ fixed in latest |
| — | Table Field Add-on for ACF and SCF [advanced-custom-fields-table-field] < 1.1.13 | — | Unknown | < 1.1.13 | 1.1.13 | 2016-07-13 | ✓ fixed in latest |
| — | Table Field Add-on for ACF and SCF [advanced-custom-fields-table-field] < 1.1.13 | — | Unknown | < 1.1.13 | 1.1.13 | — | ✓ fixed in latest |
| — | Advanced Custom Fields: Table Field <= 1.1.12 - Stored Cross-Site Scripting (XSS) | — | Unknown | < 1.1.13 | 1.1.13 | — | ✓ fixed in latest |
How to fix it
Keep Advanced Custom Fields Table Field updated — 1.3.35 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Advanced Custom Fields (ACF®) — 2000000+ active installs — 90/100 (1438) — max PHP 8.4
- ACF Content Analysis for Yoast SEO — 100000+ active installs — 82/100 (35) — max PHP 8.4
- Advanced Custom Fields: Extended — 100000+ active installs — 96/100 (132) — max PHP <8.0
- Advanced Custom Fields: Font Awesome Field — 90000+ active installs — 98/100 (36) — max PHP 8.4
- ACF Photo Gallery Field — 60000+ active installs — 80/100 (29)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.