WordPress Plugin Vulnerability Exposes 100,000+ Sites to Privilege Escalation Attacks

A critical security flaw in the popular Advanced Custom Fields: Extended WordPress plugin has put more than 100,000 websites at risk of full takeover. The vulnerability, tracked as CVE-2025-14533, affects plugin versions up to and including 0.9.2.1 and carries a CVSS score of 9.8 (Critical). If left unpatched, it allows an unauthenticated attacker to gain […]

The post WordPress Plugin Vulnerability Exposes 100,000+ Sites to Privilege Escalation Attacks appeared first on Cyber Security News.

This article has been indexed from Cyber Security News

Read the original article: