Read the docs

wpengine

Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

wpengine records in CISA KEV

No wpengine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpgraphql 5 records HIGH Genesis Blocks 3 records HIGH Advanced Custom Fields 1 record LOW Better Search Replace 1 record CRITICAL Php Compatibility Checker 1 record LOW

Records

1 record in Better Search Replace · all components

TI-2023-06336 CVE-2023-6933 · GHSA-8gwq-mv35-rmmj

Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection

Priority CRITICAL 86

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.68047 Published 2024-02-05 No fix listed CWE-502
Open these records in search →