WWPMU DEV

Products

Exploited and recent CVEs

• CVE-2026-120845 Medium 6.5 WordPress Smush Image Compression and Optimization plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability –
• CVE-2026-116859 Medium 5.3 WordPress Forminator plugin <= 1.58.3 - Broken Access Control vulnerability 0.2%
• CVE-2026-116858 Medium 4.3 WordPress Forminator plugin <= 1.58.3 - Content Injection vulnerability 0.2%
• CVE-2026-110901 Medium 5.4 WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability 0.1%
• CVE-2026-102389 Medium 6.5 WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability 0.2%
• CVE-2026-108486 Medium 5.3 WordPress Forminator plugin <= 1.58.0 - Broken Access Control vulnerability 0.2%
• CVE-2026-65459 High 7.5 WordPress Forminator plugin <= 1.57.3 - Arbitrary Content Deletion vulnerability 0.3%
• CVE-2026-96341 High 8.2 WordPress Forminator plugin <= 1.57.3 - Privilege Escalation vulnerability 0.3%
• CVE-2026-102388 High 7.1 WordPress Forminator plugin <= 1.57.3 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-96336 High 7.5 WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability 0.3%
• CVE-2026-106611 High 7.1 WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
• CVE-2026-96335 High 7.5 WordPress Forminator plugin <= 1.57.2 - Broken Access Control vulnerability 0.2%
• CVE-2026-103075 Medium 4.3 WordPress Hustle plugin <= 7.8.14.2 - Broken Access Control vulnerability 0.2%
• CVE-2026-102376 High 7.1 WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-84772 Medium 5.5 WordPress Broken Link Checker plugin <= 2.4.14 - Server Side Request Forgery (SSRF) vulnerability 0.3%
• CVE-2026-82220 Medium 5.3 WordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability 0.3%
• CVE-2026-81285 High 7.5 WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability 0.5%
• CVE-2026-66583 Critical 9.8 WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability 0.6%
• CVE-2026-28143 High 7.1 WordPress Forminator plugin <= 1.56.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-28111 High 8.8 WordPress Forminator plugin <= 1.56.0 - Privilege Escalation vulnerability 0.4%
• CVE-2026-56071 High 7.1 WordPress Forminator plugin <= 1.53.1 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-25431 Medium 5.3 WordPress Hustle plugin <= 7.8.10.1 - Broken Access Control vulnerability 0.2%
• CVE-2024-45625 Medium 6.1 Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who follows a c 0.4%
• CVE-2023-51542 Medium 5.3 WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability 0.4%
• CVE-2023-47189 Medium 5.3 WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability 0.5%
• CVE-2024-25595 Medium 5.3 WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability 0.4%
• CVE-2022-44581 Medium 5.0 WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability 0.7%
• CVE-2024-28890 Medium 5.3 Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this vulnerability is exploited, a remote attacker may obtain sensitive information by accessin 0.7%
• CVE-2024-31077 High 7.2 Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any informa 30.4%
• CVE-2024-31857 Medium 5.4 Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain user information etc. and alter the page contents on the user 0.6%