Wpmu DEV vulnerabilities
35 CVEs and advisories name Wpmu DEV as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-121763WordPress Hummingbird plugin <= 3.21.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-120845WordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115952WordPress Forminator plugin <= 1.58.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116859WordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerability
- CVE-2026-116858WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerability
- CVE-2026-110901WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-102389WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability
- CVE-2026-108486WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability
- CVE-2026-65459WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability
- CVE-2026-96341WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability
- CVE-2026-102388WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-96336WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability
- CVE-2026-106611WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-96335WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability
- CVE-2026-103075WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability
- CVE-2026-102376WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-84772WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2026-82220WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability
- CVE-2026-81285WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability
- CVE-2026-66583WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability
- CVE-2026-28143WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-28111WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability
- CVE-2026-56071WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-25431WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability
- CVE-2024-45625Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1.
- CVE-2023-51542WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability
- CVE-2023-47189WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability
- CVE-2024-25595WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability
- CVE-2022-44581WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability
- CVE-2024-28890Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability.