Vendor
wpengine
Public exploit1Avg CVSS6.9
CVEs in the catalog
19
since 2024-02
Months in the top 100
0
months with a stored rank
Best rank
—
ranked at the time
Latest rank
—
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| advanced custom fields pro | 8 | 42% |
| advanced custom fields | 4 | 21% |
| advanced custom fields acf | 4 | 21% |
| advanced custom field pro | 3 | 16% |
| database backup for wordpress | 3 | 16% |
| 3d viewer display interactive 3d models | 1 | 5% |
| a no code page builder for beautiful performance based content | 1 | 5% |
| abeta link punchout | 1 | 5% |
| acf for woocommerce product | 1 | 5% |
| activity log for mainwp | 1 | 5% |
| add linkedin insight tags for linkedin ads | 1 | 5% |
| add pinterest conversion tags for pinterest ads site verification | 1 | 5% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-862 | 8 | 42% |
| CWE-502 | 2 | 11% |
| CWE-94 | 2 | 11% |
| CWE-22 | 1 | 5% |
| CWE-345 | 1 | 5% |
| CWE-352 | 1 | 5% |
| CWE-639 | 1 | 5% |
| CWE-79 | 1 | 5% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | CVSS | Published |
|---|---|---|---|
| CVE-2026-54239 | CWE-345, CWE-639 | 8.8 | 2026-09-17 |
| CVE-2026-8382 | CWE-862 | 5.3 | 2026-05-31 |
| CVE-2026-4029 | CWE-862 | 7.5 | 2026-05-14 |
| CVE-2026-4030 | CWE-862 | 8.1 | 2026-05-14 |
| CVE-2026-4031 | CWE-862 | 7.5 | 2026-05-14 |
| CVE-2026-4812 | CWE-862 | 5.3 | 2026-04-15 |
| CVE-2025-11427 | CWE-918 | 5.8 | 2025-11-18 |
| CVE-2025-54940 | CWE-94 | 4.6 | 2025-08-08 |
| CVE-2024-37251 | CWE-352 | 4.3 | 2024-12-16 |
| CVE-2024-9529 | n/a | 6.6 | 2024-11-15 |
| CVE-2024-37250 | CWE-862 | 5.4 | 2024-11-01 |
| CVE-2024-37249 | CWE-862 | 4.3 | 2024-11-01 |
| CVE-2022-4974 | CWE-862 | 6.3 | 2024-10-16 |
| CVE-2024-4565 | n/a | 7.5 | 2024-06-20 |
| CVE-2024-34762 | CWE-22 | 9.9 | 2024-06-10 |