Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… < 3.9.0 - Authenticated (Subscriber+) Remote Code Execution

Description

The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.8.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server.