UpHeron
All vulnerabilities

WordPress plugins

CVE-2012-10025

Advanced Custom Fields (ACF®): PHP Remote File Inclusion

Severity
Critical 10.0
Published
3 Jan 2013
Added to UpHeron
21 Oct 2026
Fixed in
3.5.2
Exploit chance
2.1% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 12 Nov 2026
Also known as
EUVD-2012-6571, WPV-cf7eadd55a66
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Advanced Custom FieldsWordPress plugins · wp-plugin:advanced-custom-fields
  • Every version before 3.5.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2012-10025
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/advanced-custom-fields/advanced-custom-fields-351-remote-code-execution-via-remote-file-inclusion