CVE-2026-102376 | High | 7.1 | 2026-09-30 | Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions. |
CVE-2026-84772 | Medium | 5.5 | 2026-09-02 | Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions. |
CVE-2026-82220 | Medium | 5.3 | 2026-08-28 | Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions. |
CVE-2026-81285 | High | 7.5 | 2026-08-28 | Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions. |
CVE-2026-66583 | Critical | 9.8 | 2026-08-20 | Unauthenticated PHP Object Injection in Forminator <= 1.57.0 versions. |
CVE-2026-28143 | High | 7.1 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions. |
CVE-2026-28111 | High | 8.8 | 2026-08-06 | Contributor Privilege Escalation in Forminator <= 1.56.0 versions. |
CVE-2026-56071 | High | 7.1 | 2026-06-25 | Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. |
CVE-2026-25431 | Medium | 5.3 | 2026-05-12 | Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Hustle: thr… |
CVE-2024-45625 | Medium | 6.1 | 2024-09-09 | Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on th… |
CVE-2023-51542 | Medium | 5.3 | 2024-06-04 | Authentication Bypass by Spoofing vulnerability in WPMU DEV Branda allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Branda: f… |
CVE-2023-47189 | Medium | 5.3 | 2024-06-04 | Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender… |
CVE-2024-25595 | Medium | 5.3 | 2024-05-17 | Authentication Bypass by Spoofing vulnerability in WPMU DEV Defender Security allows Functionality Bypass.This issue affects Defender Security: from n/a throug… |
CVE-2022-44581 | Medium | 5.0 | 2024-05-17 | Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affe… |
CVE-2024-31857 | Medium | 5.4 | 2024-04-23 | Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc… |
CVE-2024-31077 | High | 7.2 | 2024-04-23 | Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative p… |
CVE-2024-28890 | Medium | 5.3 | 2024-04-23 | Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may… |
CVE-2024-25592 | Medium | 5.9 | 2024-03-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Broken Link Checker allows Stored XSS.This issue… |
CVE-2023-51490 | Medium | 5.3 | 2024-01-08 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue… |
CVE-2021-36821 | High | 7.1 | 2023-03-16 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPMU DEV Forminator allows Stored XSS.This issue a… |