PricingCase studies Login Start trial
Plugin Icon

Branda

WPMU DEV - Your All-in-One WordPress Platform

Developer

3.4.29

Latest version

20,000

Installations

No date

Last updated

WordPress Plugin
Active VDP
Report vulnerability
    VulnerabilitiesSecurity PolicySecurity Contributors

Vulnerability history

0 present
7 patched
2 Mitigation rules
  • WordPress Branda - White Label & Branding, Free Login Page Customizer plugin <= 3.4.24 - Unauthenticated Privilege Escalation via Account Takeover vulnerability
    <= 3.4.24
    02/01/2026
  • Reflected Cross-Site Scripting vulnerability
    <= 3.4.21
    21/11/2024
  • Unauthenticated Full Path Disclosure vulnerability
    <= 3.4.18
    11/07/2024
  • Cross Site Scripting (XSS) vulnerability
    <= 3.4.17
    28/06/2024
  • Authenticated Stored Cross-Site Scripting via SVG Upload vulnerability
    <= 3.4.17
    20/06/2024
  • IP Restriction Bypass vulnerability
    <= 3.4.14
    27/12/2023
  • Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
    <= 3.4.8.1
    20/03/2023

Vulnerability mitigation

  • Pricing
  • Application security (SCA)
  • RapidMitigate New
  • Threat Intelligence (API)
  • VS Monarx
  • VS Imunify360
  • VS Wordfence
  • Documentation
  • Service status
  • Log in

Code security

  • Managed VDP New
  • Active VDP directory 1,169
  • Security auditing
  • Compliance (CRA) New
  • Log in New

Bug bounty

  • Bug bounty
  • Leaderboard
  • Guidelines
  • Learn New
  • Report
  • Discord
  • Log in New

Use cases

  • Web developers
  • Webhosts New
  • Software vendors
  • WordPress
  • WooCommerce

Resources

  • Partners
  • Vulnerability database
  • Whitepaper 2026 New
  • Articles
  • Case studies New
  • Webinars New
  • Vulnerability statistics

Patchstack

  • About
  • Careers
  • Merch store
  • Media kit
  • LinkedIn
  • Facebook
  • X
© 2026 Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions