Advisories · Technology

superdav42 Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform.

Every CVE that names superdav42 Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-75957 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter
- superdav42 Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform
- Authentication bypass
Not analysed yet 1 Oct 2026