WP Engine vulnerabilities
We track 2 vulnerabilities in WP Engine products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 15, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest WP Engine vulnerabilities
- 8.8 High severity
Faust.js: Authentication Bypass Using an Alternate Path or Channel
Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js allows Password Recovery Exploitation. This issue affects Faust.Js: from n/a through 1.8.7.
- 7.5 High severity
Advanced Custom Fields (ACF): Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WP Engine Advanced Custom Fields (ACF).This issue affects Advanced Custom Fields (ACF): from 3.1.1 through 6.0.2.