Vulnerabilities in WPENGINE, INC.

3 results

CVE-2024-30225CRITICALWordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerabilityEPSS 0.7%CVE-2024-37251MEDIUMWordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-54940MEDIUMAn HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafEPSS 0.2%