WP Engine Vulnerabilities and Affected Products
Vulnerabilities associated with Gutenberg Blocks – ACF Blocks Suite.
Products
Clear product- Advanced Custom Fields3 vulnerabilities
- Advanced Custom Fields Pro3 vulnerabilities
- Advanced Custom Fields (ACF)1 vulnerability
- Faust.js1 vulnerability
- Gutenberg Blocks – ACF Blocks Suite1 vulnerability
- PHP Compatibility Checker1 vulnerability
- WP Migrate Lite1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-50041MEDIUM | WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Engine Gutenberg Blocks – ACF Blocks Suite acf-blocks allows Stored XSS.This issue affects Gutenberg Blocks – ACF Blocks Suite: from n/a through <= 2.6.11. CWE-79Jun 20, 2025 | CVSS6.5v3.1 | EPSS0.197% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |