WPMU DEV Dashboard vulnerabilities

2 known vulnerabilities in WPMU DEV Dashboard from Wpmudev. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WPMU DEV Dashboard: Improper Verification of Cryptographic Signature

  CVE-2026-76581Aug 28, 2026Wpmudev

  The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.1. This is due to inconsistent and ambiguous HMAC message construction between the unauthenticated `wdpsso_step1` and `wdpsso_step2` AJ

• 8.1 High severity

  WPMU DEV Dashboard: Improper Authentication

  CVE-2026-15459Aug 6, 2026Wpmudev

  The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub — the default state after installation — the site API key that keys the WDP-AUTH requ