WPMU DEV vulnerabilities, page 2
30 vulnerabilities
Known vulnerabilities in WPMU DEV products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
CVE-2026-28111wordpressforminator+1
EPSS score0.42%
Contributor Privilege Escalation in Forminator <= 1.56.0 versions.CVE-2026-28143wordpressforminator+1EPSS score0.25%
Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.CVE-2026-81285wordpresswp-smushit+1EPSS score0.46%
Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions.CVE-2026-96336wordpressforminator+1EPSS score0.27%
Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.CVE-2026-96335wordpressforminator+1EPSS score0.20%
Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Forminator: from n/a through 1.57.2.CVE-2026-96341wordpressforminator+1EPSS score0.28%
Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.CVE-2026-82220wordpressforminator+1EPSS score0.29%
Unauthenticated Other Vulnerability Type in Forminator <= 1.57.1 versions.CVE-2023-51542wordpressbranda-white-labeling+1EPSS score0.37%
Authentication Bypass by Spoofing vulnerability in WPMU DEV Branda allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Branda: from n/a through 3.4.14.CVE-2023-51490wordpressdefender-security+2EPSS score0.48%
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4.1.0.CVE-2023-47189wordpressdefender-security+2EPSS score0.45%
Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0.