advanced_custom_fields vulnerabilities

CVEs whose affected-version data names the advanced_custom_fields package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48906High· 8.1

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

▾ Twilighttassos · advanced_custom_fieldsEPSS 0.38%via NVD

advanced_custom_fields vulnerabilities (CVEs) · VulnSea