Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

WPEngine, Inc. vulnerabilities

3 published CVEs name WPEngine, Inc. among the affected products.

Newest CVEs

  • CVE-2025-54940

    An HTML injection vulnerability exists in WordPress plugin "Advanced Custom Fields" prior to 6.4.3. If this vulnerability is exploited, crafted HTML code may…

    WPEngine, Inc. · Advanced Custom Fields

    Medium4.6
  • CVE-2024-37251

    WordPress Advanced Custom Fields Pro plugin < 6.3.2 - Cross-Site Request Forgery (CSRF) vulnerability

    WPENGINE, INC. · Advanced Custom Fields PRO

    Medium4.3
  • CVE-2024-30225

    WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability

    WPENGINE, INC. · WP Migrate

    Critical10.0