Read the docs

wpmudev

Records121All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

wpmudev records in CISA KEV

No wpmudev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Forminator Forms 10 records MEDIUM Defender 4 records MEDIUM Branda 3 records LOW Defender Security 3 records MEDIUM Broken Link Checker 2 records LOW Custom Sidebars 2 records LOW Hustle 2 records MEDIUM Smush Image Compression And Optimization 2 records LOW

Records

3 records in Defender Security · all components

TI-2023-04683 CVE-2023-5089 · GHSA-j6r3-vq2c-4ghw

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

Priority MEDIUM 63

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02473 Published 2023-10-16 Fixed in 4.1.0
TI-2023-28142 CVE-2023-51490 · GHSA-gh6x-qpj6-x25r

WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure

Priority LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security &…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2024-01-08 No fix listed CWE-532
TI-2021-03282 CVE-2021-4425 · GHSA-wmpx-27x6-m5w5

Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass

Priority LOW 21

The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00563 Published 2023-07-12 No fix listed CWE-352
Open these records in search →