How severe is CVE-2026-17580?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Wplakeorg Advanced Views – Display Custom Fields (Acf, Pods, Metabox), Posts, Cpt And Woo Products Anywhere In Gutenberg, Elementor, Divi, Beaver…

CVE-2026-17580

The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in…

Vulnerability class: Broken Access Control

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Wplakeorg Advanced Views – Display Custom Fields (Acf, Pods, Metabox), Posts, Cpt And Woo Products Anywhere In Gutenberg, Elementor, Divi, Beaver… — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

Frequently asked questions

What is CVE-2026-17580?: CVE-2026-17580 is a medium-severity vulnerability in Wplakeorg Advanced Views – Display Custom Fields (Acf, Pods, Metabox), Posts, Cpt And Woo Products Anywhere In Gutenberg, Elementor, Divi, Beaver…, classified under Missing Authorization. CVSS score: 6.5/10. Published 2026-08-01.
How severe is CVE-2026-17580?: Medium severity. CVSS v3 base score is 6.5 out of 10.