How many wpengine advanced_custom_field_pro CVEs are in CISA KEV?

None of wpengine advanced_custom_field_pro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of wpengine advanced_custom_field_pro are affected?

6 distinct wpengine advanced_custom_field_pro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in wpengine advanced_custom_field_pro CVEs?

wpengine advanced_custom_field_pro's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical wpengine advanced_custom_field_pro vulnerabilities are there?

wpengine advanced_custom_field_pro has 1 critical and 1 high-severity CVEs.

What is the average severity of wpengine advanced_custom_field_pro CVEs?

The average CVSS base score across wpengine advanced_custom_field_pro's scored CVEs is 8.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

wpengine

3 CVEs

wpengine advanced_custom_field_pro Vulnerabilities

Name: wpengine advanced_custom_field_pro vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for advanced_custom_field_pro by wpengine.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

8.0

Avg CVSS

2024–2024

Last updated November 15, 2024

Overview

wpengine advanced_custom_field_pro has 3 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting wpengine advanced_custom_field_pro, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of wpengine advanced_custom_field_pro's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of wpengine advanced_custom_field_pro's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of wpengine advanced_custom_field_pro's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every wpengine advanced_custom_field_pro version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 6.31 CVE
< 6.3.91 CVE
<= 6.2.101 CVE

Fixed in

> 6.2.101 CVE
6.31 CVE
6.3.91 CVE

Find a version

3 CVEs

Sort

Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution
CVE-2024-9529
Public exploit
Patch
Medium · CVSS 6.6
EPSS 0.4% (36th pct)2024-11-15
Advanced Custom Fields < 6.3 - Contributor+ Custom Field Access
CVE-2024-4565
Public exploit
Patch
High · CVSS 7.5
EPSS 0.4% (35th pct)2024-06-20
Wordpress Advanced Custom Fields Pro plugin < 6.2.10 - Contributor+ Local File Inclusion vulnerability
CVE-2024-34762
Public exploit
Patch
CWE-22
Critical · CVSS 9.9
EPSS 0.6% (45th pct)2024-06-10

Common weakness types

The CWE weakness categories most often found in wpengine advanced_custom_field_pro CVEs. Follow any weakness for its full explanation.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVE

Other wpengine products

Browse vulnerabilities for other products by wpengine.

Advanced Custom Fields PRO8 CVEs Advanced Custom Fields6 CVEs wpgraphql5 CVEs Advanced Custom Fields (ACF®)3 CVEs Database Backup for WordPress3 CVEs genesis blocks3 CVEs Gutenberg Blocks – ACF Blocks Suite2 CVEs Advanced Custom Fields (ACF)1 CVEs

All wpengine vulnerabilities

Frequently asked questions

Common questions about wpengine advanced_custom_field_pro vulnerabilities.

How many CVEs does wpengine advanced_custom_field_pro have?: wpengine advanced_custom_field_pro has 3 published CVE records since 2024.
How many wpengine advanced_custom_field_pro CVEs are in CISA KEV?: None of wpengine advanced_custom_field_pro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for wpengine advanced_custom_field_pro vulnerabilities?: Yes — 3 of wpengine advanced_custom_field_pro's CVEs have a known public exploit.
Which versions of wpengine advanced_custom_field_pro are affected?: 6 distinct wpengine advanced_custom_field_pro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in wpengine advanced_custom_field_pro CVEs?: wpengine advanced_custom_field_pro's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical wpengine advanced_custom_field_pro vulnerabilities are there?: wpengine advanced_custom_field_pro has 1 critical and 1 high-severity CVEs.
What is the average severity of wpengine advanced_custom_field_pro CVEs?: The average CVSS base score across wpengine advanced_custom_field_pro's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track wpengine advanced_custom_field_pro vulnerabilities

Monitor new wpengine advanced_custom_field_pro vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing