Vulnerabilidades en WP Engine
8 resultadosAnálisis Vexday
WP Engine apresenta perfil de risco baixo com 8 vulnerabilidades catalogadas, nenhuma em exploração ativa (KEV) e sem críticas. A fraqueza dominante é XSS (CWE-79), típica de plataformas web, com 2 novas exposições nos últimos 90 dias indicando atividade recente de descoberta mas ainda sem evidência de ataque em campo.
CVE-2023-30777HIGHWordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)EPSS 38.8%CVE-2023-40068—Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 EPSS 1.5%CVE-2022-40696LOWWordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data ExposureEPSS 0.5%CVE-2024-45429MEDIUMCross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5EPSS 0.4%CVE-2026-49062HIGHWordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2023-24421MEDIUMWordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-50041MEDIUMWordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-49043MEDIUMWordPress WP Migrate Lite plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%