Advisories · Technology

wpmudev WPMU DEV Dashboard.

Every CVE that names wpmudev WPMU DEV Dashboard among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76581 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion
- wpmudev WPMU DEV Dashboard
- Weak cryptography or TLS
Not analysed yet 28 Aug 2026
CVE-2026-15459 CVE record

CVSS 8.1 High

WPMU DEV Dashboard <= 5.0.0 - Authentication Bypass to Arbitrary Plugin Installation (Remote Code Execution) via Forged WDP_AUTH HMAC on ?wpmudev-hub= Endpoint
- wpmudev WPMU DEV Dashboard
- Authentication bypass
Not analysed yet 6 Aug 2026