wpmudev Branda – White Label & Branding, Free Login Page Customizer vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Latest wpmudev Branda – White Label & Branding, Free Login Page Customizer vulnerabilities

CVE-2026-11551 — Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8)
CVE-2025-14998 — Branda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account Takeover (CVSS 9.8)
CVE-2024-9371 — Branda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site Scripting (CVSS 6.1)
CVE-2024-37239 — WordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
CVE-2024-6554 — Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path Disclosure (CVSS 5.3)
CVE-2024-5191 — Branda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload (CVSS 5.4)
CVE-2023-51542 — WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability (CVSS 5.3)