CVE-2022-40696

—

CVSS 3.1

7.5 high

EPSS

<1%p43

Published

Jan 8, 2024 (Jan 8, 2024)

Modified

Jun 17, 2026

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2.

Vendors: advancedcustomfields
Products: advanced custom fields
Ecosystems: WordPress
Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.