Skip to content

Wpmu Dev vulnerabilities

Products

Newest

wpmu dev smush image compression and optimization WordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-120845 6.5 MediumNovember 6, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.58.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-115952 6.5 MediumNovember 6, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerability CVE-2026-116859 5.3 MediumNovember 3, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerability CVE-2026-116858 4.3 MediumNovember 3, 2026
wpmu dev smartcrawl WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-110901 5.4 MediumOctober 16, 2026
wpmu dev broken link checker WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability CVE-2026-102389 6.5 MediumOctober 15, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability CVE-2026-108486 5.3 MediumOctober 12, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability CVE-2026-65459 7.5 HighOctober 10, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability CVE-2026-96341 8.2 HighOctober 10, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-102388 7.1 HighOctober 10, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability CVE-2026-96336 7.5 HighOctober 9, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-106611 7.1 HighOctober 8, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability CVE-2026-96335 7.5 HighOctober 7, 2026
wpmu dev hustle WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability CVE-2026-103075 4.3 MediumOctober 7, 2026
wpmu dev branda WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability CVE-2026-102376 7.1 HighSeptember 30, 2026
unknown hustle Hustle < 7.8.14.2 - Unauthenticated Arbitrary Shortcode Execution via Success Message Placeholders CVE-2026-80440 4.8 MediumSeptember 9, 2026
wpmu dev broken link checker WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-84772 5.5 MediumSeptember 2, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability CVE-2026-82220 5.3 MediumAugust 28, 2026
wpmu dev smush image compression and optimization WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability CVE-2026-81285 7.5 HighAugust 28, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability CVE-2026-66583 9.8 CriticalAugust 20, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-28143 7.1 HighAugust 6, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability CVE-2026-28111 8.8 HighAugust 6, 2026
wpmu dev forminator WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-56071 7.1 HighJune 25, 2026
wpmu dev hustle WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability CVE-2026-25431 5.3 MediumMay 12, 2026
wpmu dev hustle WordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerability CVE-2026-24998 5.3 MediumFebruary 3, 2026
unknown hustle Hustle < 7.8.5 - Admin+ Stored XSS CVE-2024-8492 4.8 MediumMay 15, 2025
incsub forminator Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this... CVE-2024-45625 6.1 MediumSeptember 9, 2024
wpmu dev branda WordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability CVE-2024-37239 5.9 MediumJuly 22, 2024
wpmu dev branda WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability CVE-2023-51542 5.3 MediumJune 4, 2024
unknown defender security, wpmudev defender +1 more WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability CVE-2023-47189 5.3 MediumJune 4, 2024
unknown defender security, wpmudev defender +1 more WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability CVE-2024-25595 5.3 MediumMay 17, 2024
unknown defender security, wpmudev defender +1 more WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability CVE-2022-44581 5.0 MediumMay 17, 2024
incsub forminator, wpmudev broken link checker +1 more Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type... CVE-2024-28890 5.3 MediumApril 23, 2024
incsub forminator Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is... CVE-2024-31077 EPSS 30.4% 7.2 HighApril 23, 2024
incsub forminator Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability... CVE-2024-31857 5.4 MediumApril 23, 2024
wpmu dev broken link checker WordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-25592 5.9 MediumMarch 15, 2024
wpmu dev defender security – malware scanner, login security & firewall, wpmudev defender security +1 more WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure CVE-2023-51490 5.3 MediumJanuary 8, 2024
wpmudev defender security, wpmu dev defender security – malware scanner, login security & firewall +1 more Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass CVE-2021-4425 4.3 MediumJuly 12, 2023
incsub forminator WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability CVE-2021-36821 7.1 HighMarch 16, 2023