Skip to content
OpenAdvisories

Vendor

wpengine

17 known vulnerabilities.

Products

Advanced Custom Fields PRO 5 Advanced Custom Fields (ACF®) 3 Database Backup for WordPress 3 Better Search Replace 1 faustjs 1 Gutenberg Blocks – ACF Blocks Suite 1 Advanced Custom Fields 1 WP Migrate 1 WP Migrate Lite – Migration Made Easy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-6933 Public exploit EPSS 68%

    Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection

    The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain …

    wpengine Better Search Replace Web / CMS