PatchTheCVEadvanced custom fields extension for joomla vulnerabilities and fixes
Recent CVEs affecting advanced custom fields extension for joomla, with upgrade or downgrade steps. 1 tracked.
Also searched as: advancedcustomfieldsextensionforjoomla.
advanced custom fields extension for joomla has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-11-05. Highest priority: CVE-2026-115452 (score 26/100).
- CVE-2026-115452 HIGH 7.5 DOWNGRADE DOWNGRADE Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and S
FAQ
How do I fix advanced custom fields extension for joomla vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is advanced custom fields extension for joomla being exploited right now?
None of the tracked advanced custom fields extension for joomla CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which advanced custom fields extension for joomla CVE should I patch first?
CVE-2026-115452 currently ranks highest (26/100): Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and S.