mhlandingpages.wpenginepowered.com · WordPress 7.0.4 · theme bootscore-child · wpengine
| Priority | Plugin | Version | Advisory | Breaking risk | Recommendation |
|---|---|---|---|---|---|
| High CVE | insert-headers-and-footers active | 2.2.0 → 2.3.9 | CVE-2026-8832 CVSS 8.8 HIGH | MEDIUM minor version bump 2.2.0 -> 2.3.9 | UPDATE THIS RUN — known high-severity CVE hits this exact version. |
| Med/Low CVE | advanced-custom-fields-pro active | 6.3.4 → 6.8.10 | CVE-2024-9529 CVSS 6.6 MEDIUM +3 more advisories | HIGH multi-minor jump 6.3.4 -> 6.8.10 (skipped 5 minor releases); HIGH BLAST RADIUS plugin — touches page rendering / forms / cache sitewide | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Routine | duplicate-page active | 4.5.3 → 4.5.9 | LOW patch bump 4.5.3 -> 4.5.9 | UPDATE — routine maintenance bump, low risk. | |
| Routine | simply-static active | 3.1.7.4 → 3.8.13 | MEDIUM multi-minor jump 3.1.7.4 -> 3.8.13 (skipped 7 minor releases) | UPDATE — routine maintenance bump, low risk. |