Code injection
CVSS score
9.8
EPSS probability
%67.6
Risk score
6.6
Published
10 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
CVE-2025-13486 - Remote Code Execution & Privilege Escalation exploit
Advanced Custom Fields Extended (ACFE) WordPress Plugin Exploit RCE - Admin Creation
The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to Remote Code Execution in versions 0.9.0.5 through 0.9.1.1 via the prepare_form() function.
Docker test environment for CVE-2025-13486 (ACF Extended RCE). For security research only.
Vulnerable setup for CVE-2025-13486 - Advanced Custom Fields: Extended - Remote Code Execution
Nuclei: Advanced Custom Fields Extended < 0.9.2 - Remote Code Execution
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-13486"