Wpengine Inc. - vulnerabilities (CVEs)
5 CVEs in 3 products, 0 in the last 30 days, newest from 2025-08-08.
Products
- Advanced Custom Fields Pro - 3 CVEs
- Advanced Custom Fields - 1 CVEs
- Wp Migrate - 1 CVEs
Newest CVEs of Wpengine Inc.
- CVE-2025-54940 - CVSS 4.6 (medium), 2025-08-08: An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may…
- CVE-2024-37251 - CVSS 4.3 (medium), 2024-12-16: Cross-Site Request Forgery (CSRF) vulnerability in WPENGINE, INC. Advanced Custom Fields PRO.This issue affects Advanced Custom Fields PRO: from n/a before…
- CVE-2024-37250 - CVSS 5.4 (medium), 2024-11-01: Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This…
- CVE-2024-37249 - CVSS 4.3 (medium), 2024-11-01: Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This…
- CVE-2024-30225 - CVSS 10 (critical), 2024-03-28: Deserialization of Untrusted Data vulnerability in WPENGINE, INC. WP Migrate.This issue affects WP Migrate: from n/a through 2.6.10.
