Auth bypass in Wpmudev Wpmu Dev Dashboard
CVE-2026-15459
The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the default state after installation — the site API key that k…
Vulnerability class: Broken Authentication
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Wpmudev Wpmu Dev Dashboard — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-15459?
- CVE-2026-15459 is a high-severity vulnerability in Wpmudev Wpmu Dev Dashboard, classified under Improper Authentication. CVSS score: 8.1/10. Published 2026-08-06.
- How severe is CVE-2026-15459?
- High severity. CVSS v3 base score is 8.1 out of 10.