What is the CVSS score of CVE-2024-4565?

CVE-2024-4565 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.4%.

Is there a public PoC exploit available for CVE-2024-4565?

Yes, a public proof-of-concept exploit is available for CVE-2024-4565. Prioritise patching immediately. EPSS: 0.4%.

Advanced Custom Fields CVE-2024-4565

MEDIUM

2024-06-20 contact@wpscan.com

WordPress Information Disclosure Advanced Custom Fields

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

CVE Published

Jun 20, 2024 - 06:15 nvd

MEDIUM 6.5

DescriptionNVD

AnalysisAI

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

The Advanced Custom Fields (ACF) WordPress plugin before 6.3, Advanced Custom Fields Pro WordPress plugin before 6.3 allows you to display custom field values for any post via shortcode without checking for the correct access Affected products include: Advancedcustomfields Advanced Custom Fields. Version information: before 6.3.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Advanced Custom Fields

View all

CVE-2023-1196 HIGH This Week POC

8.8 May 02

The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user

CVE-2022-2594 HIGH This Week POC

8.8 Aug 22

The Advanced Custom Fields WordPress plugin before 5.12.3, Advanced Custom Fields Pro WordPress plugin before 5.12.3 all

CVE-2024-9529 MEDIUM This Month POC

6.6 Nov 15

The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced C

CVE-2023-30777 MEDIUM This Month POC

6.1 May 10

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low at

CVE-2021-24241 MEDIUM This Month POC

6.1 Apr 22

The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outpu

CVE-2026-48906 CRITICAL Act Now

9.3 May 27

Arbitrary file deletion in the Novarain/Tassos Framework system plugin (plg_system_nrframework) and the suite of Tassos.

CVE-2021-20865 HIGH This Week

7.5 Dec 13

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing au

CVE-2022-23183 MEDIUM This Month

6.5 Mar 31

Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro ve

CVE-2021-20867 MEDIUM This Month

6.5 Dec 13

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing au

CVE-2021-20866 MEDIUM This Month

6.5 Dec 13

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing au

CVE-2023-6701 MEDIUM This Month

6.4 Feb 05

The Advanced Custom Fields (ACF) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom text fie

CVE-2024-45429 MEDIUM This Month

6.1 Sep 04

Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Field

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2024-4565 vulnerability details – vuln.today

Back

Advanced Custom Fields CVE-2024-4565

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Advanced Custom Fields

Same technique Information Disclosure

Share

External POC / Exploit Code