{"id":"CVE-2026-94262","revision":"bb97d3bdb92d4304adb166b76b97d374","records":[{"revision":"bb97d3bdb92d4304adb166b76b97d374","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2026-94262","aliases":[],"title":"Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action","description":"The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not verify that the requester is authorised to edit the targeted user account in the update-user action of its front-end Forms module, performing that check only when the target account holds an administrator role, which allows unauthenticated visitors to overwrite any non-administrator account's credentials and obtain a session for that account. Exploitation requires the site to publish a form whose user-update action maps its target to a visitor-submitted value rather than to the default current user.","state":0,"publishedAt":"2026-10-23T06:00:20.666+00:00","modifiedAt":"2026-10-23T10:46:03.079+00:00","affected":[{"ecosystem":"Vendor product","name":"Advanced Custom Fields: Extended","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"Advanced Custom Fields: Extended\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0.9.2.7\",\n                            \"lessThan\": \"0.9.2.8\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Advanced Custom Fields: Extended PRO","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Unknown\",\n                    \"product\": \"Advanced Custom Fields: Extended PRO\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"version\": \"0.9.2.7\",\n                            \"lessThan\": \"0.9.2.8\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[],"references":["https://wpscan.com/vulnerability/3634e73f-df12-4d84-8bf6-c098efa0b191/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-94262","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-94262","identifiers":["CVE-2026-94262"]},"retained":false,"historicalAffected":[]}],"coverage":[]}