Skip to content
OpenAdvisories

Vendor

WP Engine

8 known vulnerabilities.

Products

Advanced Custom Fields 3 Advanced Custom Fields Pro 3 Gutenberg Blocks – ACF Blocks Suite 1 Advanced Custom Fields (ACF) 1 Faust.js 1 PHP Compatibility Checker 1 WP Migrate Lite 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-49043

    WordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in WP Migrate Lite <= 2.7.8 versions.

    WP Engine WP Migrate Lite
  • Medium 6.5
    CVE-2025-50041

    WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Engine Gutenberg Blocks – ACF Blocks Suite acf-blocks allows Stored XSS.This issue affects Gutenberg Blocks – ACF Blocks Suite: from n/a through <= 2.6.11.

    WP Engine Gutenberg Blocks – ACF Blocks Suite
  • Medium 6.1
    CVE-2024-45429

    Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fiel…

    WP Engine Advanced Custom Fields Pro Advanced Custom Fields
  • Medium 5.4
    CVE-2023-24421

    WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WP Engine PHP Compatibility Checker plugin <= 1.5.2 versions.

    WP Engine PHP Compatibility Checker