WPENGINE INC vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.3%	CVE-2024-37250Advanced Custom Fields PRO (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2024-11-01CVE Database V5CVE-2024-37250 Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1. EPSS 0.3%Vulnerability WPEngine CWE-862	CVE Database V5	2024-11-01
Medium	4.3	EPSS 0.3%	CVE-2024-37249Advanced Custom Fields PRO (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.3%2024-11-01CVE Database V5CVE-2024-37249 Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1. EPSS 0.3%Vulnerability WPEngine CWE-862	CVE Database V5	2024-11-01
Critical	9.9	EPSS 0.6%	CVE-2024-34762Advanced Custom Fields PRO (WordPress plugin) · Path Traversal Critical9.9EPSS 0.6%2024-06-10CVE Database V5CVE-2024-34762 Vulnerability discovered by executing a planned security audit. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10. EPSS 0.6%Vulnerability WPENGINE CWE-22	CVE Database V5	2024-06-10
High	8.5	EPSS 0.4%	CVE-2024-34761Advanced Custom Fields PRO (WordPress plugin) · Code Injection High8.5EPSS 0.4%2024-06-10CVE Database V5CVE-2024-34761 Vulnerability discovered by executing a planned security audit. Improper Control of Generation of Code ('Code Injection') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows Code Injection.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10. EPSS 0.4%Vulnerability WPENGINE CWE-94	CVE Database V5	2024-06-10

Page 1 of 1