epochdev1.wpenginepowered.com · WordPress 7.0.3 · theme acwebdev · wpengine
| Priority | Plugin | Version | Advisory | Breaking risk | Recommendation |
|---|---|---|---|---|---|
| Critical CVE | advanced-custom-fields-pro active | 6.2.5 → 6.8.10 | CVE-2024-34762 CVSS 9.9 CRITICAL +9 more advisories | HIGH multi-minor jump 6.2.5 -> 6.8.10 (skipped 6 minor releases); HIGH BLAST RADIUS plugin — touches page rendering / forms / cache sitewide | UPDATE NOW — actively exploitable in the installed version. Do it even though blast radius is high; capture+rollback covers us. |
| High CVE | insert-headers-and-footers active | 2.1.8 → 2.3.9 | CVE-2026-8832 CVSS 8.8 HIGH | MEDIUM minor version bump 2.1.8 -> 2.3.9 | UPDATE THIS RUN — known high-severity CVE hits this exact version. |
| Med/Low CVE | genesis-blocks active | 3.1.1 → 3.1.11 | CVE-2024-2761 CVSS 6.8 MEDIUM +3 more advisories | LOW patch bump 3.1.1 -> 3.1.11 | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Med/Low CVE | limit-login-attempts-reloaded active | 3.3.4 → 3.3.8 | CVE-2026-18356 CVSS 3.7 LOW | LOW patch bump 3.3.4 -> 3.3.8 | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Med/Low CVE | megamenu active | 3.3 → 3.10.8 | CVE-2024-28003 CVSS 5.4 MEDIUM | MEDIUM multi-minor jump 3.3 -> 3.10.8 (skipped 7 minor releases) | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Routine | classic-editor active | 1.6.3 → 1.7.0 | MEDIUM minor version bump 1.6.3 -> 1.7.0 | UPDATE — routine maintenance bump, low risk. | |
| Routine | cookie-law-info active | 3.1.8 → 3.5.6 | MEDIUM multi-minor jump 3.1.8 -> 3.5.6 (skipped 4 minor releases) | UPDATE — routine maintenance bump, low risk. | |
| Routine | disable-css-js-cache active | 1.0.3 → 1.2.0 | MEDIUM minor version bump 1.0.3 -> 1.2.0 | UPDATE — routine maintenance bump, low risk. | |
| Routine | headers-security-advanced-hsts-wp active | 5.0.30 → 5.3.5 | MEDIUM multi-minor jump 5.0.30 -> 5.3.5 (skipped 3 minor releases) | UPDATE — routine maintenance bump, low risk. | |
| Routine | wpe-site-migration active | 1.0.0-beta.24 → 1.8.5 | MEDIUM multi-minor jump 1.0.0-beta.24 -> 1.8.5 (skipped 8 minor releases) | UPDATE — routine maintenance bump, low risk. |