THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-17580 (MEDIUM 6.5) — The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the register_rest_rout

[NVD] CVE-2026-17580 (MEDIUM 6.5) — The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the register_rest_rout

mednvdPublished 2026-08-01

CVE-2026-17580 CVSS: 6.5 MEDIUM Published: 2026-08-01T09:17:01.680

The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the register_rest_routes. This makes it possible for authenticated attacke

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-17580cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-17580