VENDOR

wpmudev vulnerabilities: CVEs, exploitation and patches

Every wpmudev CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-75528
Broken Link Checker stored cross-site scripting via comment author URL wpmudev Broken Link Checker · Sep 30, 2026
HIGH 7.2
CVE-2026-92229
Forminator Forms pre-auth shortcode execution wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder · Sep 30, 2026
- PoC PUBLIC
CRITICAL 9.1
CVE-2026-15748
Forminator Forms arbitrary file upload allows remote code execution wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder · Sep 29, 2026
- PoC PUBLIC
CRITICAL 9.8