CVE-2026-78068

Name of the Vulnerable Software and Affected Versions Table Field Add-on for ACF and SCF versions prior to 1.3.36

Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping within table cell content. Authenticated attackers with Contributor-level access or higher can inject arbitrary web scripts into pages, which then execute when a user views the affected page.

Recommendations Update the plugin to version 1.3.36 or later.