WP Engine Vulnerabilities and Affected Products
Vulnerabilities associated with Advanced Custom Fields (ACF).
Products
Clear product- Advanced Custom Fields3 vulnerabilities
- Advanced Custom Fields Pro3 vulnerabilities
- Advanced Custom Fields (ACF)1 vulnerability
- Faust.js1 vulnerability
- Gutenberg Blocks – ACF Blocks Suite1 vulnerability
- PHP Compatibility Checker1 vulnerability
- WP Migrate Lite1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data ExposureExposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2. CWE-200Jan 8, 2024 | CVSS3.7v3.1 | EPSS0.52% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |