Skip to content
OpenAdvisories

Vendor

WPMU DEV - Your All-in-One WordPress Platform

13 known vulnerabilities.

Products

Forminator 4 Hummingbird 3 SmartCrawl 1 Broken Link Checker 1 Smush Image Compression and Optimization 1 Hustle 1 Branda 1 Defender Security 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-32409

    WordPress Forminator plugin <= 1.50.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through <= 1.50.2.

    WPMU DEV - Your All-in-One WordPress Platform Forminator
  • Medium 5.3
    CVE-2026-24998

    WordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Embedded Sensitive Data.This issue affects Hustle: from n/a through <= 7.8.9.2.

    WPMU DEV - Your All-in-One WordPress Platform Hustle
  • Medium 4.1
    CVE-2025-22288

    WordPress Smush Image Compression and Optimization plugin <= 3.17.0 - Directory Traversal vulnerability

    Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0.

    WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization
  • Medium 5.4
    CVE-2025-62048

    WordPress SmartCrawl plugin <= 3.14.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3.

    WPMU DEV - Your All-in-One WordPress Platform SmartCrawl
  • Medium 5.3
    CVE-2024-37444

    WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1.

    WPMU DEV - Your All-in-One WordPress Platform Defender Security
  • Medium 4.3
    CVE-2024-43118

    WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1.

    WPMU DEV - Your All-in-One WordPress Platform Hummingbird
  • Medium 4.3
    CVE-2024-43117

    WordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1.

    WPMU DEV - Your All-in-One WordPress Platform Hummingbird
  • Medium 5.9
    CVE-2024-37239

    WordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Branda branda-white-labeling.This issue affects Branda: from n/a through <= 3.4.17.

    WPMU DEV - Your All-in-One WordPress Platform Branda
  • Medium 4.3
    CVE-2024-32792

    WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3.

    WPMU DEV - Your All-in-One WordPress Platform Hummingbird