Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.1epss 0.4%
from disclosure to weapon15 days
Published on NVDSep 2
1st PoC+15d
exploitation probability
0.4%top 72% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.7 does not restrict the role submitted through its front-end user forms to the roles the form actually offers, and its safeguard against privileged roles is incomplete, allowing unauthenticated visitors to register an account with elevated capabilities and then escalate it to administrator.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Unknown · Advanced Custom Fields: Extendedpublic PoCs found — 2
githubgithub.com/SangSenimanWartefak/CVE-2026-80467★ 0cve_referencewpscan.com/vulnerability/929f243b-2f1c-4eca-88bc-03b1a86270ed/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.