Vendor

    Wpmu Dev

    30 known vulnerabilities in products by Wpmu Dev, 0 of them actively exploited (CISA KEV).

    Key figures

    30

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wpmu Dev
    HighCVE-2024-31077

    WPMU DEV Forminator: SQL Injection

    also in 1 other product

    		7.2
    CriticalCVE-2026-66583

    WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-28111

    WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability

    		8.8
    HighCVE-2026-81285

    WPMU DEV Smush Image Compression and Optimization: Allocation of Resources Without Limits or Throttling

    		7.5
    HighCVE-2026-96341

    WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability

    		8.2
    HighCVE-2026-65459

    WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability

    		7.5
    HighCVE-2026-96336

    WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

    		7.5
    HighCVE-2026-96335

    WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-102376

    WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-102388

    WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-106611

    WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability

    		7.1
    MediumCVE-2026-102389

    WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability

    		6.5
    HighCVE-2026-28143

    WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-108486

    WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability

    		5.3
    HighCVE-2026-56071

    WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-110901

    WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability

    		5.4
    MediumCVE-2026-84772

    WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability

    		5.5
    MediumCVE-2026-82220

    WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability

    		5.3
    MediumCVE-2024-28890

    WPMU DEV Forminator: Information Disclosure

    also in 1 other product

    		5.3
    MediumCVE-2024-31857

    WPMU DEV Forminator: Cross-Site Scripting (XSS)

    also in 1 other product

    		5.4
    CriticalCVE-2022-44581

    WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability

    also in 1 other product

    		5.0
    MediumCVE-2026-103075

    WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2024-45625

    WPMU DEV Forminator: Cross-Site Scripting (XSS)

    also in 1 other product

    		6.1
    HighCVE-2021-36821

    WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2026-25431

    WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability

    		5.3

    All vulnerabilities in search

    Products

    Products by Wpmu Dev
    Forminator170
    Broken Link Checker30
    Defender Security30