Back to Database
Status published
Medium
CVE-2022-23183
Missing authorization vulnerability in Advanced Custom Fields versions prior to...
Vulnerability Description
Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacker to view the information on the database without the access permission.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-23183
Credits & Attribution
No credits recorded in the NVD database.
References
More from Delicious Brains
View All →CVE-2021-24494
WP Offload SES Lite < 1.4.5 - Stored Cross-Site Scripting (XSS)
Medium
5.4
CVE-2021-24322
Database Backup for WordPress < 2.4 - Authenticated Persistent Cross-Site Scripting (XSS)
Medium
5.4
CVE-2021-20867
Advanced Custom Fields versions prior to 5.11 and Advanced Custom...
Medium
6.5
CVE-2021-20866
Advanced Custom Fields versions prior to 5.11 and Advanced Custom...
Medium
6.5
CVE-2021-20865
Advanced Custom Fields versions prior to 5.11 and Advanced Custom...
High
7.5
Affected Vendor
Delicious Brains
View all reports →Affected Software
Advanced Custom Fields
Vulnerable Versions:
Advanced Custom Fields versions prior to 5.12.1, and Advanced Custom Fields Pro versions prior to 5.12.1
Timeline
Official Publish:
March 31st, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.