WD
Vendor
WPMU DEV
20
CVEs
0
On KEV
11
New 30D
Products
FO9.8
Forminator
WPMU DEV
13 CVEs0 on KEV7 new
BL6.5
Broken Link Checker
WPMU DEV
2 CVEs0 on KEV1 new
HU5.3
Hustle
WPMU DEV
2 CVEs0 on KEV1 new
BR7.1
Branda
WPMU DEV
1 CVEs0 on KEV1 new
SM5.4
SmartCrawl
WPMU DEV
1 CVEs0 on KEV1 new
SI7.5
Smush Image Compression and Optimization
WPMU DEV
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110901 | SM SmartCrawl WPMU DEV | 5.4 | Oct 16 | WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-102389 | BL Broken Link Checker WPMU DEV | 6.5 | Oct 15 | WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability |
| CVE-2026-108486 | FO Forminator WPMU DEV | 5.3 | Oct 12 | WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability |
| CVE-2026-65459 | FO Forminator WPMU DEV | 7.5 | Oct 10 | WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability |
| CVE-2026-96341 | FO Forminator WPMU DEV | 8.2 | Oct 10 | WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability |
| CVE-2026-102388 | FO Forminator WPMU DEV | 7.1 | Oct 10 | WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-96336 | FO Forminator WPMU DEV | 7.5 | Oct 9 | WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability |
| CVE-2026-106611 | FO Forminator WPMU DEV | 7.1 | Oct 8 | WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-96335 | FO Forminator WPMU DEV | 7.5 | Oct 7 | WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability |
| CVE-2026-103075 | HU Hustle WPMU DEV | 4.3 | Oct 7 | WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability |
| CVE-2026-102376 | BR Branda WPMU DEV | 7.1 | Sep 30 | WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-84772 | BL Broken Link Checker WPMU DEV | 5.5 | Sep 2 | WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-82220 | FO Forminator WPMU DEV | 5.3 | Aug 28 | WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability |
| CVE-2026-81285 | SI Smush Image Compression and Optimization WPMU DEV | 7.5 | Aug 28 | WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability |
| CVE-2026-66583 | FO Forminator WPMU DEV | 9.8 | Aug 20 | WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability |
| CVE-2026-28143 | FO Forminator WPMU DEV | 7.1 | Aug 6 | WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-28111 | FO Forminator WPMU DEV | 8.8 | Aug 6 | WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability |
| CVE-2026-56071 | FO Forminator WPMU DEV | 7.1 | Jun 25 | WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-25431 | HU Hustle WPMU DEV | 5.3 | May 12 | WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability |
| CVE-2024-45625 | FO Forminator WPMU DEV | 6.1 | Sep 9 | Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1 |