www.cimat-balancing.com · WordPress 7.0.4 · theme theme · wpengine
| Priority | Plugin | Version | Advisory | Breaking risk | Recommendation |
|---|---|---|---|---|---|
| Critical CVE | gravityforms inactive | 2.9.31 → no fix available | CVE-2026-48866 CVSS 9.6 CRITICAL +8 more advisories | N/A no update available — nothing to upgrade to; HIGH BLAST RADIUS plugin — touches page rendering / forms / cache sitewide | NO FIX AVAILABLE — vulnerable and the vendor has no newer version installed//licensed here. Options: confirm the licence is active (premium plugins stop offering updates when a key lapses), replace the plugin, or accept the risk deliberately. Do NOT ignore silently. |
| Med/Low CVE | acf-to-rest-api active | 3.3.4 → no fix available | CVE-2025-62979 CVSS 5.3 MEDIUM +1 more advisories | N/A no update available — nothing to upgrade to | No update offered for this version — likely an expired premium licence or a removed plugin. Worth a look. |
| Med/Low CVE | wp-migrate-db active | 2.7.7 → no fix available | CVE-2026-49043 CVSS 4.7 MEDIUM | N/A no update available — nothing to upgrade to | No update offered for this version — likely an expired premium licence or a removed plugin. Worth a look. |
| Med/Low CVE | wordpress-seo active | 26.9 → 28.5 | CVE-2026-3427 CVSS +1 more advisories | HIGH MAJOR version jump 26.9 -> 28.5 (API/behavior changes expected); HIGH BLAST RADIUS plugin — touches page rendering / forms / cache sitewide | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Major version | gutenberg active | 22.5.0 → 24.0.0 | HIGH MAJOR version jump 22.5.0 -> 24.0.0 (API/behavior changes expected) | HOLD / STAGE FIRST — major jump on a high-blast-radius plugin with no security pressure. Recommend testing on a staging twin before prod. | |
| Routine | advanced-custom-fields-pro active | 6.7.0.2 → 6.8.10 | HIGH minor version bump 6.7.0.2 -> 6.8.10; HIGH BLAST RADIUS plugin — touches page rendering / forms / cache sitewide | UPDATE WITH CAPTURE — routine bump but on a sitewide-impact plugin; watch the diff closely. | |
| Routine | amplifi-plugins active | 3.2.1 → 3.3.7 | MEDIUM minor version bump 3.2.1 -> 3.3.7 | UPDATE — routine maintenance bump, low risk. |