CVE-2026-54239 is a high-severity vulnerability in the FaustWP WordPress plugin used in Faust.js, a headless WordPress toolkit. The vulnerability allows a logged-in non-administrator to potentially gain full access to the WordPress REST API and execute arbitrary code by modifying the initialization vector of an authorization code. This could lead to administrator-account creation, plugin installation, and [truncated]
The Advanced Custom Fields (ACF®) WordPress plugin contains an authorization bypass vulnerability affecting versions up to and including 6.8.1. The plugin fails to properly verify user authorization before processing form submissions on publicly accessible acf_form() instances. Unauthenticated attackers can inject arbitrary values through the _post_title and _post_content parameters to overwrite post titl [truncated]
