CoreCVE

CVE Browser

More filters (active)

Page 1 (more results available)

Vendor: Wpengine Remove filter Clear all
CVE-2026-54239 HIGH

FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope

CVSS 8.8 EPSS 0.32% Sep 17, 2026
CVE-2026-49043 MEDIUM

WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

CVSS 4.7 EPSS 0.16% Jun 15, 2026
CVE-2026-49062 HIGH

WordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerability

CVSS 8.8 EPSS 0.56% Jun 15, 2026
CVE-2026-8382 MEDIUM

Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters

CVSS 5.3 EPSS 0.52% May 31, 2026
CVE-2026-4029 HIGH

Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Export

CVSS 7.5 EPSS 0.50% May 14, 2026
CVE-2026-4030 HIGH

Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion

CVSS 8.1 EPSS 0.57% May 14, 2026
CVE-2026-4031 HIGH

Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Backup Interception

CVSS 7.5 EPSS 0.57% May 14, 2026
CVE-2026-4812 MEDIUM

Advanced Custom Fields (ACF®) <= 6.7.0 - Unauthenticated Missing Authorization to Arbitrary Post/Page Disclosure via AJAX Field Query Parameters

CVSS 5.3 EPSS 0.86% Apr 15, 2026
CVE-2025-11427 MEDIUM

WP Migrate Lite <= 2.7.6 - Unauthenticated Blind Server-Side Request Forgery

CVSS 5.8 EPSS 0.47% Nov 18, 2025
CVE-2025-54940 MEDIUM

An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may b…

CVSS 4.6 EPSS 0.21% Aug 8, 2025
CVE-2025-50041 MEDIUM

WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) Vulnerability

CVSS 6.5 EPSS 0.23% Jun 20, 2025
CVE-2024-3901 MEDIUM

Genesis Blocks <= 3.1.3 - Contributor+ Stored XSS

CVSS 6.8 EPSS 0.55% May 15, 2025
CVE-2024-37251 MEDIUM

WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

CVSS 4.3 EPSS 0.23% Dec 16, 2024
CVE-2024-9529 MEDIUM

Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution

CVSS 6.6 EPSS 0.43% Nov 15, 2024
CVE-2024-37250 MEDIUM

WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Subscriber+ Broken Access Control vulnerability

CVSS 5.4 EPSS 0.30% Nov 1, 2024
CVE-2024-37249 MEDIUM

WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Contributor+ Broken Access Control vulnerability

CVSS 4.3 EPSS 0.32% Nov 1, 2024
CVE-2022-4974 MEDIUM

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVSS 6.3 EPSS 0.44% Oct 16, 2024
CVE-2024-45429 MEDIUM

Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an…

CVSS 6.1 EPSS 0.42% Sep 4, 2024
CVE-2024-3563 MEDIUM

Genesis Blocks <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Sharing Block Attributes

CVSS 6.4 EPSS 0.35% Jul 9, 2024
CVE-2024-4565 HIGH

Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access

CVSS 7.5 EPSS 0.43% Jun 20, 2024
CVE-2024-34762 CRITICAL

Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability

CVSS 9.9 EPSS 0.59% Jun 10, 2024
CVE-2024-34761 HIGH

Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Arbitrary Function Execution vulnerability

CVSS 8.5 EPSS 0.43% Jun 10, 2024
CVE-2024-2761 MEDIUM

Genesis Blocks < 3.1.3 - Contributor+ Stored XSS

CVSS 6.8 EPSS 0.66% Apr 19, 2024
CVE-2024-30225 CRITICAL

WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability

CVSS 10.0 EPSS 0.68% Mar 28, 2024
CVE-2023-6701 MEDIUM

Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field

CVSS 6.4 EPSS 0.52% Feb 5, 2024

Showing 1 to 25 CVEs · page 1 (more available)