CVE-2025-14533

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 20, 2026

Last Seen

January 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in ACF Extended Plugin Threatens 100,000 WordPress Sites26.6

A critical security vulnerability has been identified in the Advanced Custom Fields: Extended plugin for WordPress, affecting up to 100,000 websites. The flaw allows unauthenticated attackers to gain administrative permissions, with a severity rating of 9.8 assigned to the vulnerability, tracked as...