Wp Engine - vulnerabilities (CVEs)

8 CVEs in 7 products, 0 in the last 30 days, newest from 2026-06-15.

Products

• Advanced Custom Fields - 3 CVEs
• Advanced Custom Fields Pro - 3 CVEs
• Advanced Custom Fields Acf - 1 CVEs
• Faust.js - 1 CVEs
• Gutenberg Blocks Acf Blocks Suite - 1 CVEs
• Php Compatibility Checker - 1 CVEs
• Wp Migrate Lite - 1 CVEs

Newest CVEs of Wp Engine

• CVE-2026-49043 - CVSS 4.7 (medium), 2026-06-15: Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions.
• CVE-2026-49062 - CVSS 8.8 (high), 2026-06-15: Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects…
• CVE-2025-50041 - CVSS 6.5 (medium), 2025-06-20: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Engine Gutenberg Blocks – ACF Blocks Suite acf-blocks…
• CVE-2024-45429 - CVSS 6.1 (medium), 2024-09-04: Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If…
• CVE-2022-40696 - CVSS 7.5 (high), 2024-01-08: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields…
• CVE-2023-40068 - CVSS 5.4 (medium), 2023-08-21: Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote…
• CVE-2023-24421 - CVSS 8.8 (high), 2023-07-11: Cross-Site Request Forgery (CSRF) vulnerability in WP Engine PHP Compatibility Checker plugin <= 1.5.2 versions.
• CVE-2023-30777 - CVSS 7.1 (high), 2023-05-10: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.