← Back to browse · API

CVE-2024-34762

Severity
CRITICAL
CVSS
9.9
EPSS
0.0059
Risk score
39.81
CISA KEV
No
PoC
No
Published
2024-06-10
Modified
2026-04-28
First seen
2026-08-07
Aliases
EUVD-2024-35032, GHSA-9P58-3XXV-43MC
Products
Unknown:Advanced Custom Fields Pro n/a <6.2.10
Sources
euvd EUVD-2024-35032

Description

Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10.

References