Skip to content
OpenAdvisories

Vendor

WPMU DEV

35 known vulnerabilities.

Products

Forminator 20 Broken Link Checker 3 Defender Security 3 Smush Image Compression and Optimization 2 Branda 2 Hustle 2 Defender Security – Malware Scanner, Login Security & Firewall 1 SmartCrawl 1 Hummingbird 1
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.5
    CVE-2026-65459

    WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability

    Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions.

    WPMU DEV Forminator
  • High 8.2
    CVE-2026-96341

    WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.

    WPMU DEV Forminator
  • High 7.1
    CVE-2026-102388

    WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3.

    WPMU DEV Forminator
  • High 7.5
    CVE-2026-96336

    WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability

    Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.

    WPMU DEV Forminator
  • High 7.1
    CVE-2026-106611

    WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3.

    WPMU DEV Forminator
  • High 7.5
    CVE-2026-96335

    WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2.

    WPMU DEV Forminator
  • High 7.1
    CVE-2026-102376

    WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions.

    WPMU DEV Branda
  • High 7.5
    CVE-2026-81285

    WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability

    Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions.

    WPMU DEV Smush Image Compression and Optimization
  • High 7.1
    CVE-2026-28143

    WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.

    WPMU DEV Forminator
  • High 8.8
    CVE-2026-28111

    WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability

    Contributor Privilege Escalation in Forminator <= 1.56.0 versions.

    WPMU DEV Forminator
  • High 7.1
    CVE-2026-56071

    WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions.

    WPMU DEV Forminator
  • High 7.2
    CVE-2024-31077 EPSS 30%

    Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authent…

    WPMU DEV Forminator
  • High 7.1
    CVE-2021-36821

    WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPMU DEV Forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.14.11.

    WPMU DEV Forminator