Log in Start free

WP Engine

Products

ProductCVEsExploitedLatest
Advanced Custom Fields3–Sep 4, 2024
Advanced Custom Fields Pro3–Sep 4, 2024
Gutenberg Blocks – ACF Blocks Suite1–Jun 20, 2025
PHP Compatibility Checker1–Jul 11, 2023
WP Migrate Lite1–Jun 15, 2026
Faust.js1–Jun 15, 2026
Advanced Custom Fields (ACF)1–Jan 8, 2024

Exploited and recent CVEs

  • CVE-2026-49043 Medium 4.7 WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-49062 High 8.8 WordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerability 0.3%
  • CVE-2025-50041 Medium 6.5 WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2024-45429 Medium 6.1 Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the 'capability' setting p 0.4%
  • CVE-2024-45429 Medium 6.1 Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the 'capability' setting p 0.4%
  • CVE-2022-40696 Low 3.7 WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure 0.5%
  • CVE-2023-40068 Unrated Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitra 2.0%
  • CVE-2023-40068 Unrated Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker to execute an arbitra 2.0%
  • CVE-2023-24421 Medium 5.4 WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-30777 High 7.1 WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS) 39.0%
  • CVE-2023-30777 High 7.1 WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS) 39.0%