Read the docs

wpmudev

Records121All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

wpmudev records in CISA KEV

No wpmudev vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Forminator Forms 10 records MEDIUM Defender 4 records MEDIUM Branda 3 records LOW Defender Security 3 records MEDIUM Broken Link Checker 2 records LOW Custom Sidebars 2 records LOW Hustle 2 records MEDIUM Smush Image Compression And Optimization 2 records LOW

Records

2 records in Smush Image Compression And Optimization · all components

TI-2022-00908 CVE-2022-1009 · GHSA-j96r-f3m8-gwxp

Smush < 3.9.9 - Admin+ Reflected Cross-Site Scripting

Priority LOW 29

The Smush WordPress plugin before 3.9.9 does not sanitise and escape a configuration parameter before outputting it back in an admin page when uploading a malicious preset configuration, leading to a Reflected Cross-Site…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-30 Fixed in 3.9.9 CWE-79
Open these records in search →