yearinreviestg.wpengine.com · WordPress 6.8.8 · theme nvp-eoy2022 · wpengine
| Priority | Plugin | Version | Advisory | Breaking risk | Recommendation |
|---|---|---|---|---|---|
| Critical CVE | advanced-custom-fields-pro active | 6.0.5 → 6.8.10 | CVE-2024-34762 CVSS 9.9 CRITICAL +13 more advisories | HIGH multi-minor jump 6.0.5 -> 6.8.10 (skipped 8 minor releases); HIGH BLAST RADIUS plugin — touches page rendering / forms / cache sitewide | UPDATE NOW — actively exploitable in the installed version. Do it even though blast radius is high; capture+rollback covers us. |
| High CVE | aryo-activity-log active | 2.8.5 → 2.15.0 | CVE-2024-10788 CVSS 7.2 HIGH +2 more advisories | MEDIUM multi-minor jump 2.8.5 -> 2.15.0 (skipped 7 minor releases) | UPDATE THIS RUN — known high-severity CVE hits this exact version. |
| Med/Low CVE | all-404-pages-redirect-to-homepage active | 1.7 → no fix available | CVE-2024-24889 CVSS 6.1 MEDIUM | N/A no update available — nothing to upgrade to | No update offered for this version — likely an expired premium licence or a removed plugin. Worth a look. |
| Med/Low CVE | genesis-blocks active | 1.5.3 → 3.1.11 | CVE-2024-2761 CVSS 6.8 MEDIUM +3 more advisories | HIGH MAJOR version jump 1.5.3 -> 3.1.11 (API/behavior changes expected) | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Med/Low CVE | safe-svg active | 2.0.3 → 2.5.0 | CVE-2024-8378 CVSS 4.8 MEDIUM +1 more advisories | MEDIUM multi-minor jump 2.0.3 -> 2.5.0 (skipped 5 minor releases) | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Med/Low CVE | wordpress-seo active | 19.11 → 28.5 | CVE-2024-4984 CVSS 6.4 MEDIUM +8 more advisories | HIGH MAJOR version jump 19.11 -> 28.5 (API/behavior changes expected); HIGH BLAST RADIUS plugin — touches page rendering / forms / cache sitewide | UPDATE — real but lower-severity CVE. Low urgency, still worth clearing. |
| Routine | acf-content-analysis-for-yoast-seo active | 3.0.1 → 3.2 | MEDIUM minor version bump 3.0.1 -> 3.2 | UPDATE — routine maintenance bump, low risk. | |
| Routine | classic-editor active | 1.6.2 → 1.7.0 | MEDIUM minor version bump 1.6.2 -> 1.7.0 | UPDATE — routine maintenance bump, low risk. |