Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how wpmudev compares to other vendors in security performance

View Risk Score →

WPMU DEV AppointmentsAppointments <= 2.2.1 - Unauthenticated PHP Object Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2017-20206

WPMU DEV ForminatorForminator <= 1.44.1 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via id and data-size Parameters

Risk 28
Severity
6.4
EPSS
0.03%
First published (updated )
CVE-2025-5341

Hustle WordPress pluginHustle < 7.8.5 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-8492

Forminator ForminatorForminator <= 1.42.0 - Order Replay Vulnerability

Risk 19
Severity
5.3
EPSS
0.01%
First published (updated )
CVE-2025-3479

WPMU DEV ForminatorForminator <= 1.42.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'limit'

Risk 28
Severity
6.4
EPSS
0.03%
First published (updated )
CVE-2025-3487
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpmudev Forminator Forms WordpressForminator <= 1.39.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Risk 39
Severity
6.4
First published (updated )
CVE-2025-0469

WP Forminator Forminator FormsForminator < 1.38.3 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-7052

Forminator Forms – Contact Form, Payment Form & Custom Form BuilderForminator <= 1.38.2 - Reflected Cross-Site Scripting via Title Parameter

Risk 38
Severity
6.1
First published (updated )
CVE-2025-0470

wpmudev Defender WordpressWordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2024-37444

wpmudev Forminator Forms WordpressForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.36.0 - Insecure Direct Object Reference to Submission Manipulation

Risk 19
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-9700
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpmudev Forminator Forms WordpressForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation

Risk 79
Severity
8.8
First published (updated )
CVE-2024-10402

Forminator Forms – Contact Form, Payment Form & Custom Form BuilderForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Quiz Creation

Risk 16
Severity
4.3
EPSS
0.05%
First published (updated )
CVE-2024-9351

wpmudev Forminator Forms WordpressForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Cross-Site Request Forgery to Draft Custom Form Creation

Risk 16
Severity
4.3
EPSS
0.05%
First published (updated )
CVE-2024-9352

wpmudev Hummingbird WordpressWordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
First published (updated )
CVE-2024-43117

wpmudev Branda WordpressWordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability

Risk 29
Severity
5.9
First published (updated )
CVE-2024-37239
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpmudev Branda WordpressBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosure

Risk 19
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2024-6554

wpmudev Branda WordpressBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

Risk 28
Severity
6.4
EPSS
0.05%
First published (updated )
CVE-2024-5191

WPMU DEV Defender SecurityWordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2023-47189

WPMU DEV Defender SecurityWordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2024-25595

WPMU DEV Defender SecurityWordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2022-44581
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpmudev Broken Link Checker WordpressWordPress Broken Link Checker plugin <= 2.2.3 - Cross Site Scripting (XSS) vulnerability

Risk 30
Severity
5.9
EPSS
0.04%
First published (updated )
CVE-2024-25592

wpmudev Hustle WordpressHustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys

Risk 49
Severity
8.6
First published (updated )
CVE-2024-0368

wpmudev Defender Security WordpressWordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure

Risk 43
Severity
7.5
First published (updated )
CVE-2023-51490

wpmudev Smartcrawl WordpressSmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post Disclosure

Risk 31
Severity
7.5
EPSS
0.08%
First published (updated )
CVE-2023-5949

wpmudev Defender Security WordpressDefender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

Risk 28
Severity
5.3
First published (updated )
CVE-2023-5089
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

wpmudev Defender Security WordpressDefender Security <= 2.4.6 - Cross-Site Request Forgery Bypass

Risk 22
Severity
4.3
First published (updated )
CVE-2021-4425

wpmudev Broken Link Checker WordpressBroken Link Checker Plugin ui_get_action_links cross site scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2015-10098

wpmudev Smush Image Compression And Optimization WordpressSmush < 3.9.9 - Admin+ Reflected Cross-Site Scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2022-1009

wpmudev Custom Sidebars WordpressCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2017-18510

wpmudev Custom Sidebars WordpressCSRF

Risk 77
Severity
8.8
First published (updated )
CVE-2017-18511
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203