Threat database

36 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-57814Forminator · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPMU DEV -… High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57814 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through <= 1.55.0.1. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform #cwe-79	CVE Database V5	2026-07-13
High	7.1	EPSS 0.3%	CVE-2026-56071Forminator · Cross-site Scripting High7.1EPSS 0.3%2026-06-25CVE Database V5CVE-2026-56071 Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.53.1 versions. EPSS 0.3%Vulnerability WPMU DEV #cwe-79	CVE Database V5	2026-06-25
Medium	5.3	EPSS 0.3%	CVE-2026-25431Hustle · Missing Authorization Medium5.3EPSS 0.3%2026-05-12CVE Database V5CVE-2026-25431 Missing Authorization vulnerability in WPMU DEV Hustle allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Hustle: through 7.8.10.1. EPSS 0.3%Vulnerability WPMU DEV #cwe-862	CVE Database V5	2026-05-12
High	7.6	EPSS 0.4%	CVE-2026-39466Broken Link Checker · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in WPMU DEV -… High7.6EPSS 0.4%2026-04-08CVE Database V5CVE-2026-39466 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through <= 2.4.7. EPSS 0.4%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-04-08
Medium	5.3	EPSS 0.3%	CVE-2026-32409Forminator · Missing Authorization Medium5.3EPSS 0.3%2026-03-13CVE Database V5CVE-2026-32409 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through <= 1.50.2. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-24998Hustle · Exposure of Sensitive System Information to an Unauthorized Control Sphere in WPMU DEV - Your… Medium5.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24998 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Embedded Sensitive Data.This issue affects Hustle: from n/a through <= 7.8.9.2. EPSS 0.2%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-02-03
Medium	4.1	EPSS 0.3%	CVE-2025-22288Smush Image Compression and Optimization · Path Traversal: '.../...//' Medium4.1EPSS 0.3%2025-11-06CVE Database V5CVE-2025-22288 Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2025-11-06
Medium	5.4	EPSS 0.2%	CVE-2025-62048SmartCrawl · Missing Authorization Medium5.4EPSS 0.2%2025-10-22CVE Database V5CVE-2025-62048 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3. EPSS 0.2%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2025-10-22
Medium	5.3	EPSS 0.5%	CVE-2024-37444Defender Security · Missing Authorization Medium5.3EPSS 0.5%2024-11-01CVE Database V5CVE-2024-37444 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1. EPSS 0.5%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-11-01
Medium	4.3	EPSS 0.6%	CVE-2024-43118Hummingbird · Missing Authorization Medium4.3EPSS 0.6%2024-11-01CVE Database V5CVE-2024-43118 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1. EPSS 0.6%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-11-01
Medium	4.3	EPSS 0.2%	CVE-2024-43117Hummingbird · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-08-26CVE Database V5CVE-2024-43117 Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1. EPSS 0.2%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-08-26
Medium	5.9	EPSS 0.3%	CVE-2024-37239Branda · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPMU DEV -… Medium5.9EPSS 0.3%2024-07-22CVE Database V5CVE-2024-37239 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Branda branda-white-labeling.This issue affects Branda: from n/a through <= 3.4.17. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-07-22
Medium	4.3	EPSS 0.3%	CVE-2024-32792Hummingbird · Missing Authorization Medium4.3EPSS 0.3%2024-06-09CVE Database V5CVE-2024-32792 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-06-09
Medium	5.3	EPSS 0.4%	CVE-2024-25595Defender Security · Authentication Bypass by Spoofing Medium5.3EPSS 0.4%2024-05-17CVE Database V5CVE-2024-25595 Authentication Bypass by Spoofing vulnerability in WPMU DEV Defender Security allows Functionality Bypass.This issue affects Defender Security: from n/a through 4.4.1. EPSS 0.4%Vulnerability WPMU DEV #cwe-290	CVE Database V5	2024-05-17
High	7.1	EPSS 0.4%	CVE-2024-29777Forminator · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WPMU DEV -… High7.1EPSS 0.4%2024-03-27CVE Database V5CVE-2024-29777 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator.This issue affects Forminator: from n/a through <= 1.29.0. EPSS 0.4%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-03-27
Medium	5.9	EPSS 0.3%	CVE-2024-25592Broken Link Checker · Cross-site Scripting Medium5.9EPSS 0.3%2024-03-15CVE Database V5CVE-2024-25592 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Broken Link Checker allows Stored XSS.This issue affects Broken Link Checker: from n/a through 2.2.3. EPSS 0.3%Vulnerability WPMU DEV #cwe-79	CVE Database V5	2024-03-15

Showing 21–36 of 36 results