MEDIUM
WP Engine
CVE published 2026-06-15
CVE-2026-49043
A Cross Site Request Forgery (CSRF) vulnerability exists in WP Migrate Lite versions up to 2.7.8. This issue allows unauthenticated attackers to perform CSRF attacks.
WP Engine CVE debriefs
These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
HIGH
WP Engine
CVE published 2026-06-15
CVE-2026-49062
CVE-2026-49062 is an Authentication Bypass Using an Alternate Path or Channel vulnerability in WP Engine Faust.Js that allows Password Recovery Exploitation. This issue affects Faust.Js from n/a through 1.8.7. The CVSS score is 8.8, indicating a HIGH severity. The CVE record was published on 2026-06-15T14:16:35.727Z and was last modified on 2026-10-25T23:10:00.167Z.