CVE-2026-3243 | danbilabs Advanced Members for ACF Plugin up to 1.2.5 on WordPress Path Validation create_crop path traversal

A vulnerability classified as critical has been found in danbilabs Advanced Members for ACF Plugin up to 1.2.5 on WordPress. This affects the function create_crop of the component Path Validation Handler. This manipulation causes path traversal.

This vulnerability is registered as CVE-2026-3243. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.