CVE-2025-14998criticalobserved exploitationCWE-639

CVE-2025-14998: critical vulnerability in wpmudev Branda – White Label & Branding, Free…

Branda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account Takeover

Published · Updated

Follow this CVE+ Monitor Branda – White Label & Branding, Free Login Page Customizer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

85Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 9.8epss 1.9%
from disclosure to weapon3 days
Published on NVDJan 2
1st PoC+3d
VulnCheckJan 2
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.24. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
wpmudev · Branda – White Label & Branding, Free Login Page Customizer
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — wpmudev Branda – White Label & Branding, Free…

In the same product, most dangerous first.

CVE-2026-11551CRITICALBranda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account TakeoverEPSS 0.6%CVE-2024-9371MEDIUMBranda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2024-6554MEDIUMBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path DisclosureEPSS 0.5%CVE-2024-5191MEDIUMBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadEPSS 0.3%