tag
Validation-Bypass
Critical
Laravel `files.*` Wildcard Validation Bypass via Polyglot JPEG+PHP Upload (CVE-2025-27515)
CVE-2025-27515·
Laravel Framework (file upload validation using files.* wildcard rules)
unpatched
Critical
Advanced Custom Fields: Extended Unauthenticated Privilege Escalation via `_acf_post_id` Validation Bypass (CVE-2026-8809)
CVE-2026-8809·
Advanced Custom Fields: Extended (ACF Extended / "ACFE") WordPress plugin
patched