CVEs we hold for Advanced
Records whose assigning authority named Advanced as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-9148Comments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' Fieldadvancedcoding Comments – wpDiscuz
CVE-2026-80467Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert…Unknown Advanced Custom Fields: Extended
CVE-2026-19074Advanced Classifieds & Directory Pro < 3.4.3 - Unauthenticated Non-Public Listing Custom Field DisclosureUnknown Advanced Classifieds & Directory Pro
CVE-2026-14566Advanced Customized Prompts <= 1.0.1 - Subscriber+ WooCommerce Order Item Metadata TamperingUnknown advanced-customized-prompts
CVE-2026-14565Advanced Customized Prompts <= 1.0.1 - Subscriber+ Stored XSS via Product Popup ConfigurationUnknown advanced-customized-prompts
CVE-2026-14563Advanced Customized Prompts <= 1.0.1 - Unauthenticated Account TakeoverUnknown advanced-customized-prompts
CVE-2026-13701Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis SettingUnknown Advanced Excerpt
CVE-2026-12526Advanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update…Unknown Advanced Custom Fields: Extended
CVE-2026-11794Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role MappingUnknown Advanced Form Integration — Connect Forms to 200+…
CVE-2026-11565Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_uiUnknown Advanced File Manager
CVE-2026-10082Advanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' ParameterUnknown Advanced Ads
CVE-2025-68997WordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerabilityAdvancedCoding wpDiscuz
CVE-2025-59591WordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control VulnerabilityAdvancedCoding wpDiscuz
CVE-2025-59554WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerabilityAdvanced Ads – Tracking
CVE-2024-9488Comments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth provideradvancedcoding Comments – wpDiscuz
CVE-2024-6704Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injectionadvancedcoding Comments – wpDiscuz
CVE-2024-4565Advanced Custom Fields < 6.3 - Contributor+ Custom Field AccessUnknown Advanced Custom Fields Pro
CVE-2024-2477wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Textadvancedcoding Comments – wpDiscuz
CVE-2024-13317ShipWorks Connector for Woocommerce <= 5.2.5 - Cross-Site Request Forgery to Service Password/Username Updateadvancedcreation ShipWorks Connector for Woocommerce
CVE-2024-0951Advanced Social Feeds Widget & Shortcode <= 1.7 - Admin+ Stored XSSUnknown Advanced Social Feeds Widget & Shortcode
CVE-2023-7062Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory TraversalAdvanced File Manager Shortcodes
CVE-2023-7061Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File UploadAdvanced File Manager Shortcodes
CVE-2023-5529Advanced Page Visit Counter <= 8.0.6 - Admin+ Stored XSSUnknown Advanced Page Visit Counter
CVE-2023-52226WordPress Advanced Flamingo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerabilityAdvanced Flamingo
CVE-2023-51690WordPress Advanced iFrame Plugin <= 2023.8 is vulnerable to Cross Site Scripting (XSS)Advanced iFrame
CVE-2023-46309WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerabilityAdvancedCoding wpDiscuz
CVE-2023-45760WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerabilityAdvancedCoding wpDiscuz
CVE-2023-3998wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/Decreaseadvancedcoding Comments – wpDiscuz
CVE-2023-3869wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decreaseadvancedcoding Comments – wpDiscuz
CVE-2023-3814Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder AccessUnknown Advanced File Manager
CVE-2023-1196Advanced Custom Fields - Contributor+ PHP Object InjectionUnknown Advanced Custom Fields (ACF) Pro
CVE-2022-45824WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to Cross Site Request Forgery (CSRF)Advanced Booking Calendar
CVE-2022-45822WordPress Advanced Booking Calendar Plugin <= 1.7.1 is vulnerable to SQL InjectionAdvanced Booking Calendar
CVE-2022-3677Advanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRFUnknown Advanced Import : One Click Import for WordPress or…
CVE-2022-3426Advanced WP Columns <= 2.0.6 - Admin+ Stored Cross-Site ScriptingUnknown Advanced WP Columns
CVE-2022-32776WordPress Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityAdvanced Ads – Ad Manager & AdSense
CVE-2022-3220Advanced Comment Form < 1.2.1 - Admin+ Authenticated Stored XSSUnknown Advanced Comment Form
CVE-2022-2181Advanced WordPress Reset < 1.6 - Reflected Cross-Site ScriptingUnknown Advanced WordPress Reset
CVE-2022-2173Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site ScriptingUnknown Advanced Database Cleaner
CVE-2022-1216Advanced Image Sitemap <= 1.2 - Reflected Cross-Site ScriptingUnknown Advanced Image Sitemap
CVE-2022-1007Advanced Booking Calendar < 1.7.1 - Reflected Cross-Site ScriptingUnknown Advanced Booking Calendar
CVE-2022-0694Advanced Booking Calendar < 1.7.0 - Unauthenticated SQL InjectionUnknown Advanced Booking Calendar
CVE-2022-0626Advanced Admin Search < 1.1.6 - Reflected Cross-Site ScriptingUnknown Advanced Admin Search
CVE-2022-0399Advanced Product Labels for WooCommerce < 1.2.3.7 - Reflected Cross-Site ScriptingUnknown Advanced Product Labels for WooCommerce
CVE-2021-25086Advanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site ScriptingUnknown Advanced Page Visit Counter – Advanced WordPress…
CVE-2021-25084Advanced Cron Manager - Subscriber+ Arbitrary Events/Schedules Creation/DeletionUnknown Advanced Cron Manager Pro
CVE-2021-24957Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injectionUnknown Advanced Page Visit Counter – Advanced WordPress…
CVE-2021-24921Advanced Database Cleaner < 3.0.4 - Reflected Cross-Site ScriptingUnknown Advanced Database Cleaner
CVE-2021-24905Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File DeletionUnknown Advanced Contact form 7 DB
CVE-2021-24865Advanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL InjectionUnknown Advanced Custom Fields: Extended
CVE-2021-24830Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site ScriptingUnknown Advanced Access Manager
CVE-2021-24432Advanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)Unknown Advanced AJAX Product Filters
CVE-2021-24241Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)Unknown Advanced Custom Fields Pro
CVE-2021-24232Advanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS)Unknown Advanced Booking Calendar
CVE-2021-24225Advanced Booking Calendar < 1.6.7 - Authenticated Reflected Cross-Site Scripting (XSS)Unknown Advanced Booking Calendar
CVE-2021-24169Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)Unknown Advanced Order Export For WooCommerce
CVE-2021-24141Advanced Database Cleaner < 3.0.2 - Authenticated SQL injectionUnknown Advanced Database Cleaner
CVE-2012-10025WordPress Plugin Advanced Custom Fields <= 3.5.1 Remote File InclusionAdvanced Custom Fields WordPress Plugin
74 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.