WPMU DEV vulnerabilities
We track 9 vulnerabilities in WPMU DEV products across 3 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.
Latest WPMU DEV vulnerabilities
- 8.2 High severity
Forminator: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.
- 7.1 High severity
Forminator: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3.
- 7.5 High severity
Forminator: Authentication Bypass by Spoofing
Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2.
- 7.1 High severity
Forminator: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3.
- 7.5 High severity
Forminator: Missing Authorization
Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through 1.57.2.
- 9.8 Critical severity
Defender Security: Improper Authentication
Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0.
- 9.8 Critical severity
Defender Security: Insecure Storage of Sensitive Information
Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2.
- 7.2 High severity
Forminator: Improper Neutralization of Special Elements used in an SQL Command
Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with an administrative privilege may obtain and alter any information in the database and cause a denial-of-service (DoS) con
- 7.5 High severity
Defender Security – Malware Scanner, Login…: Insertion of Sensitive Information into Log File
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4.1.0.