Wp Engine vulnerabilities

Products

• Advanced Custom Fields 3
• Advanced Custom Fields Pro 3
• Gutenberg Blocks – Acf Blocks Suite 2

Newest

• wp engine migrate lite WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-49043 4.7 MediumJune 15, 2026
• wp engine faust.js WordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerability CVE-2026-49062 8.8 HighJune 15, 2026
• wp engine gutenberg blocks – acf blocks suite WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) Vulnerability CVE-2025-50041 6.5 MediumJune 20, 2025
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• tassos.gr advanced custom fields, unknown advanced custom fields pro +1 more Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier... CVE-2024-45429 6.1 MediumSeptember 4, 2024
• advancedcustomfields advanced custom fields, unknown advanced custom fields (acf) +1 more WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure CVE-2022-40696 3.7 LowJanuary 8, 2024
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced... CVE-2023-40068 5.4 MediumAugust 21, 2023
• wp engine php compatibility checker WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-24421 5.4 MediumJuly 11, 2023
• advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 more WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS) CVE-2023-30777 Public exploit EPSS 39.0% 7.1 HighMay 10, 2023