Branda – White Label & Branding, Free Login Page Customizer vulnerabilities

2 known vulnerabilities in Branda – White Label & Branding, Free Login Page Customizer from Wpmudev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Branda – White Label & Branding, Free Login…: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-11551Jun 20, 2026Wpmudev

  The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possibl

• 9.8 Critical severity

  Branda – White Label & Branding, Free Login…: Authorization Bypass Through User-Controlled Key

  CVE-2025-14998Jan 2, 2026WpmudevEPSS 1.87%

  The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.24. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possibl