Skip to content
OpenAdvisories

Vendor

WP Engine

8 known vulnerabilities.

Products

Advanced Custom Fields 3 Advanced Custom Fields Pro 3 Gutenberg Blocks – ACF Blocks Suite 1 Advanced Custom Fields (ACF) 1 Faust.js 1 PHP Compatibility Checker 1 WP Migrate Lite 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-49062

    WordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7.

    WP Engine Faust.js
  • High 7.1
    CVE-2023-30777 Public exploit EPSS 39%

    WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.

    WP Engine Advanced Custom Fields Pro Advanced Custom Fields