CVE-2026-96743

Name of the Vulnerable Software and Affected Versions Table Field Add-on for ACF and SCF versions prior to 1.4.1-RC2

Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and above to perform Stored Cross-Site Scripting (XSS). This occurs via the Table Field Value, enabling the injection of arbitrary web scripts into pages that execute when accessed by other users.

Recommendations Update the plugin to a version later than 1.4.1-RC2.