diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 5f43eb35..5aac240f 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -30,6 +30,13 @@ ryandewhurst at gmail
 
 -->
 <vulnerabilities>
+  <plugin name="advanced-custom-fields">
+    <vulnerability>
+      <title>Advanced Custom Fields &lt;= 3.5.1 Remote File Inclusion</title>
+      <reference>http://packetstormsecurity.com/files/119221/wp_advanced_custom_fields_exec.rb.txt</reference>
+      <type>RFI</type>
+    <vulnerability>
+  </plugin>
   <plugin name="sitepress-multilingual-cms">
     <vulnerability>
       <title>Wordpress sitepress-multilingual-cms Full Path Disclosure</title>