CVE-2026-120534 - Advanced Custom Fields: Extended PRO <= 0.9.2.6 - Unauthenticated Remote Code Execution via Dynamic Render Field Type
CVE ID :CVE-2026-120534 Published : Nov. 3, 2026, 5:18 a.m. | 1 hour, 45 minutes ago Description :The Advanced Custom Fields: Extended PRO plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 0.9.2.6 via the render_field function. This is due to...