Cross-site Scripting

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Advanced Custom Fields < 6.1.6 - Cross-Site ScriptingCVE-2023-30777WP Engine · CVSS 7.1 · 39% likely

   CWE-79

2. Cross-site scripting vulnerability in Advanced Custom Fields versions 6.1.0 to 6.1.7 and Advanced Custom Fields Pro versions 6.1.0 to 6.1.7 allows a remote authenticated attacker…CVE-2023-40068WP Engine · 2.0% likely

   CWE-79

3. Genesis Blocks < 3.1.3 - Contributor+ Stored XSSCVE-2024-2761Wpengine · CVSS 6.8 · 0.7% likely

   CWE-79

4. Genesis Blocks <= 3.1.3 - Contributor+ Stored XSSCVE-2024-3901Wpengine · CVSS 6.8 · 0.6% likely

   CWE-79

5. Advanced Custom Fields <= 6.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom FieldCVE-2023-6701wpengine · CVSS 6.4 · 0.5% likely

   CWE-79

6. Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Fields Pro versions 6.3.5 and earlier. If an attacker with the '…CVE-2024-45429WP Engine · CVSS 6.1 · 0.4% likely

   CWE-79

7. WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.11 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-50041WP Engine · CVSS 6.5 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.