Wpmu Dev

15 CVEs across 6 Wpmu Dev products. Browse Wpmu Dev vulnerabilities, severities, and proof-of-concept exploits.

Wpmu Dev products with known CVEs

ProductCVEs
Forminator8
Defender Security3
Branda1
Broken Link Checker1
Defender Security – Malware Scanner, Login Security & Firewall1
Hustle1
Wpmu Dev CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-28143High7.12026-08-06Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.
CVE-2026-28111High8.82026-08-06Contributor Privilege Escalation in Forminator <= 1.56.0 versions.
CVE-2026-56071High7.12026-06-25Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.
CVE-2026-25431Medium5.32026-05-12Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hustle: thr…
CVE-2024-45625Medium6.12024-09-09Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on th…
CVE-2023-51542Medium5.32024-06-04Authentication Bypass by Spoofing vulnerability in WPMU DEV Branda allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Branda: f…
CVE-2023-47189Medium5.32024-06-04Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender…
CVE-2024-25595Medium5.32024-05-17Authentication Bypass by Spoofing vulnerability in WPMU DEV Defender Security allows Functionality Bypass.This issue affects Defender Security: from n/a throug…
CVE-2022-44581Medium5.02024-05-17Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affe…
CVE-2024-31857Medium5.42024-04-23Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc…
CVE-2024-31077High7.22024-04-23Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative p…
CVE-2024-28890Medium5.32024-04-23Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may…
CVE-2024-25592Medium5.92024-03-15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Broken Link Checker allows Stored XSS.This issue…
CVE-2023-51490Medium5.32024-01-08Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue…
CVE-2021-36821High7.12023-03-16Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPMU DEV Forminator allows Stored XSS.This issue a…