faustjs vulnerabilities

1 known vulnerability in faustjs from Wpengine. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  faustjs: Insufficient Verification of Data Authenticity

  CVE-2026-54239Sep 17, 2026Wpengine

  Faust.js is a headless WordPress toolkit. Prior to 1.8.11, the FaustWP WordPress plugin authenticates only the ciphertext in its token envelope and excludes the 16-byte initialization vector from the HMAC in WPE\FaustWP\Auth\encrypt() and WPE\FaustWP\Auth\decr