Plugin icon

Advanced Views – Display Framework – Gutenberg/Elementor/Shortcode

acf-views

Vulnerabilities:

3

Last Updated:

October 15, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-07-31
Title
Advanced Views < 3.9.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST Endpoints
Fixed in
Fixed in 3.9.2
CVSS
6.5 (medium)
Published
2026-07-22
Title
Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… < 3.9.0 - Authenticated (Subscriber+) Remote Code Execution
Fixed in
Fixed in 3.9.0
CVSS
4.3 (medium)
Published
2025-09-22
Title
Advanced Views < 3.7.20 - Author+ Remote Code Execution via SSTI
Fixed in
Fixed in 3.7.20
CVSS
8.8 (high)