← WordPress Vulnerabilities
WordPress security by component

Blocks for ACF Fields — Display Custom Fields in the Block Editor

Blocks for ACF Fields — Display Custom Fields in the Block Editor is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 09, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: acf-field-blocks

CVE-2026-12428: Blocks for ACF Fields — Display Custom Fields in the Block Editor: A security weakness

Blocks for ACF Fields — Display Custom Fields in the Block Editor is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.6.2.

PublishedJul 09, 2026
Known safe version> 1.6.2
Safe version
Jul 09, 2026 CVE-2026-12428
Blocks for ACF Fields — Display Custom Fields in the Block Editor: A security weakness
Blocks for ACF Fields — Display Custom Fields in the Block Editor is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.6.2.
> 1.6.2
CVE6.5
NVDPending