CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2025-31832 – WordPress ACF City Selector plugin <= 1.16.0 - Sensitive Data Exposure vulnerability
https://notcve.org/view.php?id=CVE-2025-31832
01 Apr 2025 — Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beee ACF City Selector allows Retrieve Embedded Sensitive Data. This issue affects ACF City Selector: from n/a through 1.16.0. The ACF City Selector plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.0. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data. • https://patchstack.com/database/wordpress/plugin/acf-city-selector/vulnerability/wordpress-acf-city-selector-plugin-1-16-0-sensitive-data-exposure-vulnerability?_s_id=cve • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere •
CVSS: 7.2EPSS: 13%CPEs: 1EXPL: 3CVE-2024-56264 – WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability
https://notcve.org/view.php?id=CVE-2024-56264
30 Dec 2024 — Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through 1.14.0. The ACF City Selector plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.14.0. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server whi... • https://packetstorm.news/files/id/189417 • CWE-434: Unrestricted Upload of File with Dangerous Type •