Log in Start free

WPENGINE INC

Products

ProductCVEsExploitedLatest
Advanced Custom Fields PRO5–Dec 16, 2024
Advanced Custom Fields1–Aug 8, 2025
WP Migrate1–Mar 28, 2024

Exploited and recent CVEs

  • CVE-2025-54940 Low 3.4 An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may be rendered and page display may be tamper 0.2%
  • CVE-2024-37251 Medium 4.3 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-37250 Medium 5.4 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability 0.3%
  • CVE-2024-37249 Medium 4.3 WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability 0.3%
  • CVE-2024-34762 Critical 9.9 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability 0.6%
  • CVE-2024-34761 High 8.5 Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability 0.4%
  • CVE-2024-30225 Critical 10.0 WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability 0.7%