WD
Vendor
WPMU DEV
30
CVEs
0
On KEV
11
New 30D
Products
FO9.8
Forminator
WPMU DEV
17 CVEs0 on KEV7 new
BL6.5
Broken Link Checker
WPMU DEV
3 CVEs0 on KEV1 new
BR7.1
Branda
WPMU DEV
2 CVEs0 on KEV1 new
HU5.3
Hustle
WPMU DEV
2 CVEs0 on KEV1 new
SM5.4
SmartCrawl
WPMU DEV
1 CVEs0 on KEV1 new
DS9.8
Defender Security
WPMU DEV
3 CVEs0 on KEV0 new
DS7.5
Defender Security – Malware Scanner, Login Security & Firewall
WPMU DEV
1 CVEs0 on KEV0 new
SI7.5
Smush Image Compression and Optimization
WPMU DEV
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110901 | SM SmartCrawl WPMU DEV | 5.4 | Oct 16 | WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-102389 | BL Broken Link Checker WPMU DEV | 6.5 | Oct 15 | WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability |
| CVE-2026-108486 | FO Forminator WPMU DEV | 5.3 | Oct 12 | WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability |
| CVE-2026-65459 | FO Forminator WPMU DEV | 7.5 | Oct 10 | WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability |
| CVE-2026-96341 | FO Forminator WPMU DEV | 8.2 | Oct 10 | WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability |
| CVE-2026-102388 | FO Forminator WPMU DEV | 7.1 | Oct 10 | WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-96336 | FO Forminator WPMU DEV | 7.5 | Oct 9 | WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability |
| CVE-2026-106611 | FO Forminator WPMU DEV | 7.1 | Oct 8 | WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-96335 | FO Forminator WPMU DEV | 7.5 | Oct 7 | WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability |
| CVE-2026-103075 | HU Hustle WPMU DEV | 4.3 | Oct 7 | WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability |
| CVE-2026-102376 | BR Branda WPMU DEV | 7.1 | Sep 30 | WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-84772 | BL Broken Link Checker WPMU DEV | 5.5 | Sep 2 | WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-82220 | FO Forminator WPMU DEV | 5.3 | Aug 28 | WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability |
| CVE-2026-81285 | SI Smush Image Compression and Optimization WPMU DEV | 7.5 | Aug 28 | WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability |
| CVE-2026-66583 | FO Forminator WPMU DEV | 9.8 | Aug 20 | WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability |
| CVE-2026-28143 | FO Forminator WPMU DEV | 7.1 | Aug 6 | WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-28111 | FO Forminator WPMU DEV | 8.8 | Aug 6 | WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability |
| CVE-2026-56071 | FO Forminator WPMU DEV | 7.1 | Jun 25 | WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-25431 | HU Hustle WPMU DEV | 5.3 | May 12 | WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability |
| CVE-2024-45625 | FO Forminator WPMU DEV | 6.1 | Sep 9 | Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1 |
| CVE-2023-51542 | BR Branda WPMU DEV | 5.3 | Jun 4 | WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability |
| CVE-2023-47189 | DS Defender Security WPMU DEV | 9.8 | Jun 4 | WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability |
| CVE-2024-25595 | DS Defender Security WPMU DEV | 5.3 | May 17 | WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability |
| CVE-2022-44581 | DS Defender Security WPMU DEV | 9.8 | May 17 | WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability |
| CVE-2024-28890 | FO Forminator WPMU DEV | 5.3 | Apr 23 | Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability |
| CVE-2024-31077 | FO Forminator WPMU DEV | 7.2 | Apr 23 | Forminator prior to 1.29.3 contains a SQL injection vulnerability |
| CVE-2024-31857 | FO Forminator WPMU DEV | 5.4 | Apr 23 | Forminator prior to 1.15.4 contains a cross-site scripting vulnerability |
| CVE-2024-25592 | BL Broken Link Checker WPMU DEV | 4.8 | Mar 15 | WordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-51490 | DS Defender Security – Malware Scanner, Login Security & Firewall WPMU DEV | 7.5 | Jan 8 | WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure |
| CVE-2021-36821 | FO Forminator WPMU DEV | 6.1 | Mar 16 | WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability |