Vendor

    Wpmu Dev - Your All-in-one Wordpress Platform

    13 known vulnerabilities in products by Wpmu Dev - Your All-in-one Wordpress Platform, 0 of them actively exploited (CISA KEV).

    Key figures

    13

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Wpmu Dev - Your All-in-one Wordpress Platform
    HighCVE-2026-57815

    WordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerability

    		7.5
    HighCVE-2026-57814

    WordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-39466

    WordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerability

    		7.6
    HighCVE-2024-29777

    WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    CriticalCVE-2024-37444

    WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability

    also in 1 other product

    		5.3
    HighCVE-2024-43118

    WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    MediumCVE-2026-32409

    WordPress Forminator plugin <= 1.50.2 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-24998

    WordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerability

    		5.3
    MediumCVE-2025-62048

    WordPress SmartCrawl plugin <= 3.14.3 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2025-22288

    WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization: Path Traversal: '.../...//'

    		4.1
    MediumCVE-2024-37239

    WordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2024-32792

    WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    HighCVE-2024-43117

    WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

    also in 1 other product

    		4.3

    Products

    Products by Wpmu Dev - Your All-in-one Wordpress Platform
    Forminator40
    Hummingbird30