https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T16:47:13.583024+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-97189 fkie_cve-2026-97189 2026-11-09T16:47:13.783466+00:00

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access (Contributor and above) to disclose the titles and non-public statuses of other users' unpublished posts.

 https://db.gcve.eu/vuln/ghsa-3r78-26qx-3q7m GHSA-3r78-26qx-3q7m 2026-11-09T16:47:13.783575+00:00

The Advanced Custom Fields (ACF®) WordPress plugin before 6.8.11 does not perform a read-permission check when it renders and formats the values of its relational fields, allowing users with post-editing access (Contributor and above) to disclose the titles and non-public statuses of other users' unpublished posts.