Threat database

13 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.5%	CVE-2026-57815Forminator · Path Traversal High7.5EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57815 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through <= 1.55.0.2. EPSS 0.5%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-07-13
High	7.1	EPSS 0.3%	CVE-2026-57814Forminator · Cross-site Scripting High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57814 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through <= 1.55.0.1. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-07-13
High	7.6	EPSS 0.4%	CVE-2026-39466Broken Link Checker · SQL Injection High7.6EPSS 0.4%2026-04-08CVE Database V5CVE-2026-39466 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Broken Link Checker broken-link-checker allows Blind SQL Injection.This issue affects Broken Link Checker: from n/a through <= 2.4.7. EPSS 0.4%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-04-08
Medium	5.3	EPSS 0.3%	CVE-2026-32409Forminator · Missing Authorization Medium5.3EPSS 0.3%2026-03-13CVE Database V5CVE-2026-32409 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/a through <= 1.50.2. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-24998Hustle · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24998 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hustle wordpress-popup allows Retrieve Embedded Sensitive Data.This issue affects Hustle: from n/a through <= 7.8.9.2. EPSS 0.2%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2026-02-03
Medium	4.1	EPSS 0.3%	CVE-2025-22288Smush Image Compression and Optimization · Path Traversal: '.../...//' Medium4.1EPSS 0.3%2025-11-06CVE Database V5CVE-2025-22288 Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Traversal.This issue affects Smush Image Compression and Optimization: from n/a through <= 3.17.0. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2025-11-06
Medium	5.4	EPSS 0.2%	CVE-2025-62048SmartCrawl · Missing Authorization Medium5.4EPSS 0.2%2025-10-22CVE Database V5CVE-2025-62048 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl: from n/a through <= 3.14.3. EPSS 0.2%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2025-10-22
Medium	5.3	EPSS 0.5%	CVE-2024-37444Defender Security · Missing Authorization Medium5.3EPSS 0.5%2024-11-01CVE Database V5CVE-2024-37444 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1. EPSS 0.5%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-11-01
Medium	4.3	EPSS 0.6%	CVE-2024-43118Hummingbird · Missing Authorization Medium4.3EPSS 0.6%2024-11-01CVE Database V5CVE-2024-43118 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1. EPSS 0.6%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-11-01
Medium	4.3	EPSS 0.2%	CVE-2024-43117Hummingbird · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-08-26CVE Database V5CVE-2024-43117 Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.9.1. EPSS 0.2%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-08-26
Medium	5.9	EPSS 0.3%	CVE-2024-37239Branda · Cross-site Scripting Medium5.9EPSS 0.3%2024-07-22CVE Database V5CVE-2024-37239 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Branda branda-white-labeling.This issue affects Branda: from n/a through <= 3.4.17. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-07-22
Medium	4.3	EPSS 0.3%	CVE-2024-32792Hummingbird · Missing Authorization Medium4.3EPSS 0.3%2024-06-09CVE Database V5CVE-2024-32792 Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Hummingbird hummingbird-performance.This issue affects Hummingbird: from n/a through <= 3.7.3. EPSS 0.3%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-06-09
High	7.1	EPSS 0.4%	CVE-2024-29777Forminator · Cross-site Scripting High7.1EPSS 0.4%2024-03-27CVE Database V5CVE-2024-29777 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator.This issue affects Forminator: from n/a through <= 1.29.0. EPSS 0.4%Vulnerability WPMU DEV - Your All-in-One WordPress Platform	CVE Database V5	2024-03-27

Showing 1–13 of 13 results