Veille CVE

Recherche « WPMU DEV Branda »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « WPMU DEV Branda » ✕
  1. CVE-2026-102376 7.1 Élevée

    WPMU DEV Branda

    Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions.

  2. CVE-2026-11551 9.8 Critique

    wpmudev Branda – White Label & Branding, Free Login Page Customizer

    The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.