WPMU DEV Your All In One Wordpress Platform vulnerabilities
13 vulnerabilities
Known vulnerabilities in WPMU DEV Your All In One Wordpress Platform products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 8 products.
Products
8- Forminator4 vulnerabilities
- Hummingbird3 vulnerabilities
- Branda1 vulnerabilities
- Broken Link Checker1 vulnerabilities
- Defender Security1 vulnerabilities
- Hustle1 vulnerabilities
- Smartcrawl1 vulnerabilities
- Smush Image Compression And Optimization1 vulnerabilities
CVE-2025-62048wordpresssmartcrawl-seo+1
EPSS score0.23%
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3.CVE-2025-22288wordpresswp-smushit+1EPSS score0.35%
Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.CVE-2024-37444wordpressdefender-security+2EPSS score0.55%
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1.CVE-2024-37239wordpressbranda-white-labeling+2EPSS score0.26%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Branda branda-white-labeling.This issue affects Branda: from n/a through <= 3.4.17.CVE-2024-43118incsubhummingbird+2EPSS score0.55%
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1.CVE-2024-43117wordpresshummingbird-performance+2EPSS score0.21%
Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1.CVE-2024-29777incsubforminator+2EPSS score0.43%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator.This issue affects Forminator: from n/a through <= 1.29.0.CVE-2024-32792incsubhummingbird+2EPSS score0.28%
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3.CVE-2026-39466wordpressbroken-link-checker+1EPSS score0.38%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through <= 2.4.7.CVE-2026-57815wordpressforminator+1EPSS score0.50%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through <= 1.55.0.2.CVE-2026-57814wordpressforminator+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through <= 1.55.0.1.CVE-2026-24998wordpresswordpress-popup+1EPSS score0.23%
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Embedded Sensitive Data.This issue affects Hustle: from n/a through <= 7.8.9.2.CVE-2026-32409wordpressforminator+1EPSS score0.27%
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through <= 1.50.2.