WPEngine, Inc. vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Low	3.4	EPSS 0.2%	CVE-2025-54940Advanced Custom Fields (WordPress plugin) · Code Injection Low3.4EPSS 0.2%2025-08-08CVE Database V5CVE-2025-54940 An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may be rendered and page display may be tampered. EPSS 0.2%Vulnerability WPEngine	CVE Database V5	2025-08-08
Medium	4.3	EPSS 0.2%	CVE-2024-37251Advanced Custom Fields PRO (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-12-16CVE Database V5CVE-2024-37251 Cross-Site Request Forgery (CSRF) vulnerability in WPENGINE, INC. Advanced Custom Fields PRO.This issue affects Advanced Custom Fields PRO: from n/a before 6.3.2. EPSS 0.2%Vulnerability WPENGINE CWE-352	CVE Database V5	2024-12-16
Critical	10.0	EPSS 0.7%	CVE-2024-30225WPENGINE WP Migrate · Deserialization of Untrusted Data Critical10.0EPSS 0.7%2024-03-28CVE Database V5CVE-2024-30225 Deserialization of Untrusted Data vulnerability in WPENGINE, INC. WP Migrate.This issue affects WP Migrate: from n/a through 2.6.10. EPSS 0.7%Vulnerability CWE-502	CVE Database V5	2024-03-28

Page 1 of 1