Hwk-Fr

9 CVEs across 2 Hwk-Fr products. Browse Hwk-Fr vulnerabilities, severities, and proof-of-concept exploits.

Hwk-Fr products with known CVEs

ProductCVEs
Advanced Custom Fields: Extended5
Wp 404 Auto Redirect To Similar Post4
Hwk-Fr CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-8809Critical9.82026-05-28The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation via Validation Bypass in all versions up to and including 0.9.2…
CVE-2025-15463Medium6.52026-05-12The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.9.2.3. Thi…
CVE-2025-12037Medium4.42026-02-18The WP 404 Auto Redirect to Similar Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includ…
CVE-2025-14533Critical9.82026-01-20The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.9.2.1. This is due to t…
CVE-2025-13486Critical9.82025-12-03The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() fun…
CVE-2024-32559High7.12024-04-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post allows Reflec…
CVE-2024-0509Medium6.12024-02-05The WP 404 Auto Redirect to Similar Post plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘request’ parameter in all versions up to…
CVE-2023-5292Medium6.42023-10-20The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'acfe_form' shortcode in versions up to, and inc…
CVE-2023-40206Medium5.92023-09-04Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post plugin <= 1.0.3 versions.