WPMU DEV
Vulnerability activity for WPMU DEV: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 12
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 12
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 12
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.3MediumNov 3, 2026WPMU DEV Forminator Auth bypass / access controlCVE-2026-116859Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.3.
- 4.3MediumNov 3, 2026WPMU DEV Forminator XSSCVE-2026-116858Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WPMU DEV Forminator forminator allows Code Injection.This issue affects Forminator: from n/a through 1.58.3.
- 5.4MediumOct 16, 2026WPMU DEV SmartCrawl Auth bypass / access controlCVE-2026-110901Authorization Bypass Through User-Controlled Key vulnerability in WPMU DEV SmartCrawl smartcrawl-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SmartCrawl: from n/a through 3.16.4.
- 6.5MediumOct 15, 2026WPMU DEV Broken Link Checker Code / command injectionCVE-2026-102389Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Checker: from n/a through 2.4.14.1.
- 5.3MediumOct 12, 2026WPMU DEV Forminator Auth bypass / access controlCVE-2026-108486Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through 1.58.0.
- 7.5HighOct 10, 2026WPMU DEV Forminator Auth bypass / access controlCVE-2026-65459Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.
- 8.2HighOct 10, 2026WPMU DEV Forminator Privilege escalationCVE-2026-96341Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.
- 7.1HighOct 10, 2026WPMU DEV Forminator XSSCVE-2026-102388Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3.
- 7.5HighOct 9, 2026WPMU DEV Forminator Auth bypass / access controlCVE-2026-96336Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.
- 7.1HighOct 8, 2026WPMU DEV Forminator CSRFCVE-2026-106611Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3.
- 7.5HighOct 7, 2026WPMU DEV Forminator Auth bypass / access controlCVE-2026-96335Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2.
- 4.3MediumOct 7, 2026WPMU DEV Hustle Auth bypass / access controlCVE-2026-103075Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2.
Top products
- Forminator9 CVEs in the last year
- SmartCrawl1 CVE in the last year
- Hustle1 CVE in the last year
- Broken Link Checker1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.