wp engine
Security Risk Profile
76
/100
highSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 3, 2023 to present
6
Total CVEs
4
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
9
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
2
Critical/High
Risk Level
76/100
high
Severity Distribution
Critical
3High
1Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
XSS
1
Most Affected Products
1. WP Engine Better Search Replace3
2. vBulletin vBulletin3
3. WP Engine Faust.js1
4. WP Engine Gutenberg Blocks – ACF Blocks Suite1
5. WP Engine WP Migrate1
Recent Vulnerabilities
See more →CVE-2026-49062
CVSS 8.8high
WordPress Faust.js plugin <= 1.8.7 - Broken Authentication vulnerability
6/15/2026🔧 No Patch
CVE-2025-50041
CVSS 6.5EPSS 0%medium
WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) Vulnerability
6/20/2025🔧 No Patch
CVE-2024-30225
CVSS 10.0EPSS 0%critical
WordPress WP Migrate plugin <= 2.6.10 - Unauthenticated PHP Object Injection vulnerability
3/28/2024
CVE-2023-6933
CVSS 9.8EPSS 1%critical
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
2/5/2024
https://www.bleepingcomputer.com/news/security/hackers-target-wordpress-database-plugin-active-on-1-million-sites/
unknown
Hackers target WordPress database plugin active on 1 million sites
1/25/2024🔧 No Patch
CVE-2023-25135
CVSS 9.8critical
2/3/2023🔧 No Patch
Monitor wp engine in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.