Advanced Views <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST Endpoints
Summary
| CVE | CVE-2026-17580 |
|---|---|
| State | PUBLISHED |
| Assigner | Wordfence |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-08-01 09:17:01 UTC |
| Updated | 2026-08-01 09:17:01 UTC |
| Description | The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.1 via the register_rest_routes. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive admin-authored editor content — including template markup, CSS code, JavaScript code, and PHP controller variables — for any Layout or Post Selection post on the site. |
Risk And Classification
Primary CVSS: v3.1 6.5 MEDIUM from [email protected]
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Problem Types: CWE-862 | CWE-862 CWE-862 Missing Authorization
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Primary | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | CNA | DECLARED | 6.5 | MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Wplakeorg | Advanced Views Display Custom Fields ACF Pods MetaBox Posts CPT And Woo Products Anywhere In Gutenberg Elementor Divi Beaver | affected 3.9.1 semver | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.1/src/Cpt/Base/Cpt/Cpt_Interactive... | [email protected] | plugins.trac.wordpress.org | |
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.1/src/Cpt/Base/Cpt/Cpt_Interactive... | [email protected] | plugins.trac.wordpress.org | |
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.0/src/Cpt/Post_Selections/Cpt/Sele... | [email protected] | plugins.trac.wordpress.org | |
| www.wordfence.com/threat-intel/vulnerabilities/id/d352e4d1-92ab-482b-8fce-90ee3... | [email protected] | www.wordfence.com | |
| plugins.trac.wordpress.org/changeset | [email protected] | plugins.trac.wordpress.org | |
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.0/src/Cpt/Base/Cpt/Cpt_Interactive... | [email protected] | plugins.trac.wordpress.org | |
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.0/src/Cpt/Base/Cpt/Cpt_Interactive... | [email protected] | plugins.trac.wordpress.org | |
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.0/src/Cpt/Layouts/Cpt/Layout_Inter... | [email protected] | plugins.trac.wordpress.org | |
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.1/src/Cpt/Layouts/Cpt/Layout_Inter... | [email protected] | plugins.trac.wordpress.org | |
| plugins.trac.wordpress.org/browser/acf-views/tags/3.9.1/src/Cpt/Post_Selections/Cpt/Sele... | [email protected] | plugins.trac.wordpress.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Wordfence PRISM (en)
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2026-07-27T16:02:23.000Z | Vendor Notified |
| CNA | 2026-07-31T19:18:52.000Z | Disclosed |
There are currently no legacy QID mappings associated with this CVE.