high
CVE-2026-13609
Frontend Admin unauthenticated stored cross-site scripting
- Severity
- high
- Affected product
- acf-frontend-form-element
- Affected versions
- acf-frontend-form-element ≤ 3.28.0
- Fixed in
- acf-frontend-form-element a release above 3.28.0
- Added to NewScan
- 2026-08-01
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
COMPONENT VERSION RANGE
NewScan fingerprints acf-frontend-form-element from its response and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →