CVE-2026-96743

Published 10 October 2026 · tracked since 10 October 2026

Description

The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versions up to, and including, 1.4.1-RC2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscrib

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-103889 CRITICAL 9.8
• CVE-2026-104021 HIGH 7.2
• CVE-2026-104735 MEDIUM 6.4
• CVE-2026-102401 MEDIUM 6.4
• CVE-2026-94589 CRITICAL 9.8
• CVE-2026-107645 CRITICAL 9.1
• CVE-2026-104732 CRITICAL 9.8
• CVE-2026-104797 HIGH 8.1
• CVE-2026-104898 MEDIUM 6.8
• CVE-2026-93883 MEDIUM 6.4

→ Open the live CVE board · all tools