Skip to contentWpmu Dev - Your All-in-one Wordpress Platform vulnerabilities
Newest
- wpmu dev smush image compression and optimizationWordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1208456.5 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1159526.5 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerabilityCVE-2026-1168595.3 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.3 - Content Injection vulnerabilityCVE-2026-1168584.3 Medium
- wpmu dev smartcrawlWordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-1109015.4 Medium
- wpmu dev - your all-in-one wordpress platform broken link checkerBroken Link Checker <= 2.4.14.1 - Unauthenticated Arbitrary Shortcode Execution via parser_callbackCVE-2026-965626.5 Medium
- wpmu dev broken link checkerWordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerabilityCVE-2026-1023896.5 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerabilityCVE-2026-1084865.3 Medium
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerabilityCVE-2026-654597.5 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerabilityCVE-2026-963418.2 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1023887.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerabilityCVE-2026-963367.5 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-1066117.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerabilityCVE-2026-963357.5 High
- wpmu dev broken link checkerWordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2026-847725.5 Medium
- wpmu dev - your all-in-one wordpress platform broken link checkerBroken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link LogCVE-2026-755287.2 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerabilityCVE-2026-822205.3 Medium
- wpmu dev smush image compression and optimizationWordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerabilityCVE-2026-812857.5 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerabilityCVE-2026-665839.8 Critical
- unknown broken link checkerBroken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable InjectionCVE-2026-18937Public exploit9.0 Critical
- wpmu dev forminatorWordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-281437.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerabilityCVE-2026-281118.8 High
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerabilityCVE-2026-578157.5 High
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-578147.1 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-560717.1 High
- wpmu dev - your all-in-one wordpress platform broken link checkerWordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerabilityCVE-2026-394667.6 High
- wpmu dev - your all-in-one wordpress platform forminatorWordPress Forminator plugin <= 1.50.2 - Broken Access Control vulnerabilityCVE-2026-324095.3 Medium
- wpmu dev hustleWordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerabilityCVE-2026-249985.3 Medium
- aioseo plugin team broken link checkerWordPress Broken Link Checker plugin <= 1.2.6 - SQL Injection vulnerabilityCVE-2025-679627.6 High
- wpmu dev - your all-in-one wordpress platform smush image compression and optimizationWordPress Smush Image Compression and Optimization plugin <= 3.17.0 - Directory Traversal vulnerabilityCVE-2025-222884.1 Medium
- wpmu dev - your all-in-one wordpress platform smartcrawlWordPress SmartCrawl plugin <= 3.14.3 - Broken Access Control vulnerabilityCVE-2025-620485.4 Medium
- wpmu dev - your all-in-one wordpress platform broken link checkerBroken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard ViewCVE-2025-40474.3 Medium
- managewp broken link checkerBroken Link Checker < 2.4.2 - Admin+ SSRFCVE-2024-109034.7 Medium
- unknown defender security, wpmudev defender +1 moreWordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerabilityCVE-2024-374445.3 Medium
- incsub hummingbirdWordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerabilityCVE-2024-431184.3 Medium
- wpmu dev - your all-in-one wordpress platform broken link checkerBroken Link Checker <= 2.4.0 - Reflected Cross-Site ScriptingCVE-2024-89817.1 High
- incsub forminatorCross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this...CVE-2024-456256.1 Medium
- unknown hummingbirdWordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-431174.3 Medium
- wpmu dev brandaWordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-372395.9 Medium
- incsub hummingbirdWordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerabilityCVE-2024-327924.3 Medium
- incsub forminator, wpmudev broken link checker +1 moreForminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type...CVE-2024-288905.3 Medium
- incsub forminatorForminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is...CVE-2024-31077EPSS 30.4%7.2 High
- incsub forminatorForminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability...CVE-2024-318575.4 Medium
- incsub forminatorWordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-297777.1 High
- wpmu dev broken link checkerWordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-255925.9 Medium
- incsub forminatorForminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site ScriptingCVE-2023-51194.8 Medium
- incsub forminatorForminator < 1.24.4 - Reflected XSSCVE-2023-31346.1 Medium
- incsub forminatorForminator < 1.24.1 - Unauthenticated Race Condition on poll voteCVE-2023-20103.1 Low
- incsub forminatorWordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-368217.1 High
- managewp broken link checkerBroken Link Checker < 1.11.20 - Admin+ Cross-Site ScriptingCVE-2022-39224.8 Medium
- Show moreLoading…