Skip to contentWpmudev vulnerabilities
Newest
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission ManipulationCVE-2024-97005.3 Medium
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +2 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and CreationCVE-2024-104027.5 High
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz CreationCVE-2024-93514.3 Medium
- wpmudev forminator forms – contact form, payment form & custom form builder, forminator forms +1 moreForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form CreationCVE-2024-93524.3 Medium
- wpmu dev - your all-in-one wordpress platform broken link checkerBroken Link Checker <= 2.4.0 - Reflected Cross-Site ScriptingCVE-2024-89817.1 High
- unknown hummingbirdWordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-431174.3 Medium
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information ExposureCVE-2024-73897.5 High
- wpmu dev brandaWordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-372395.9 Medium
- wpmudev branda, branda – white label & branding, free login page customizer, branda white label wordpress custom login page customizer +2 moreBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path DisclosureCVE-2024-65545.3 Medium
- wpmudev smartcrawl, smartcrawl seo checker, analyzer & optimizer +1 moreSmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.8 - Unauthenticated Full Path DisclosureCVE-2024-65565.3 Medium
- wpmudev branda, branda – white label & branding, free login page customizer +1 moreBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadCVE-2024-51916.4 Medium
- wpmudev smush – image optimization, compression, lazy load, webp & cdnSmush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List DeletionCVE-2023-33524.3 Medium
- wpmu dev brandaWordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerabilityCVE-2023-515425.3 Medium
- unknown defender security, wpmudev defender +1 moreWordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerabilityCVE-2023-471895.3 Medium
- unknown defender security, wpmudev defender +1 moreWordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerabilityCVE-2024-255955.3 Medium
- unknown defender security, wpmudev defender +1 moreWordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerabilityCVE-2022-445815.0 Medium
- wpmudev smartcrawl, smartcrawl seo checker, analyzer & optimizer +1 moreSmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer <= 3.10.2 - Missing AuthorizationCVE-2024-32875.3 Medium
- incsub forminator, wpmudev broken link checker +1 moreForminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type...CVE-2024-288905.3 Medium
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator <= 1.29.0 - Unauthenticated Stored Cross-Site Scripting via File UploadCVE-2024-17947.2 High
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator – Contact Form, Payment Form & Custom Form Builder <= 1.29.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via forminator_form ShortcodeCVE-2024-30536.4 Medium
- wpmu dev broken link checkerWordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-255925.9 Medium
- wpmudev hustle, hustle – email marketing, lead generation, optins, popups +1 moreHustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API KeysCVE-2024-0368Public exploit8.6 High
- wpmu dev defender security – malware scanner, login security & firewall, wpmudev defender security +1 moreWordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data ExposureCVE-2023-514905.3 Medium
- wpmudev smartcrawl, unknown smartcrawl wordpress seo checker, seo analyzer, seo optimizer +1 moreSmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post DisclosureCVE-2023-59497.5 High
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator <= 1.27.0 - Authenticated (Administrator+) Arbitrary File UploadCVE-2023-61336.6 Medium
- unknown defender securityDefender Security < 4.1.0 - Protection Bypass (Hidden Login Page)CVE-2023-5089Public exploit5.3 Medium
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator <= 1.24.6 - Unauthenticated Arbitrary File UploadCVE-2023-4596Public exploitEPSS 14.3%9.8 Critical
- wpmudev defender security, wpmu dev defender security – malware scanner, login security & firewall +1 moreDefender Security <= 2.4.6 - Cross-Site Request Forgery BypassCVE-2021-44254.3 Medium
- incsub forminator, wpmudev forminator forms – contact form, payment form & custom form builder +1 moreForminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery BypassCVE-2021-44175.4 Medium
- wpmudev broken link checkerBroken Link Checker Plugin ui_get_action_links cross site scriptingCVE-2015-100983.5 Low
- managewp broken link checkerBroken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR DeserializationCVE-2022-24387.2 High
- unknown smush – lazy load images, optimize & compress images, wpmudev smush image compression and optimization +1 moreSmush < 3.9.9 - Admin+ Reflected Cross-Site ScriptingCVE-2022-10096.1 Medium
- incsub forminator, unknown forminator – contact form, payment form & custom form builder +1 moreForminator < 1.15.4 - Admin+ Stored Cross-Site ScriptingCVE-2021-247004.8 Medium
- wpmudev custom sidebarsThe custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import...CVE-2017-185108.8 High
- wpmudev custom sidebarsThe custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.CVE-2017-185118.8 High
- wpmudev smush image compression and optimizationThe Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory...CVE-2017-150797.5 High