CVE-2026-11551criticalCWE-640

CVE-2026-11551: critical vulnerability in wpmudev Branda – White Label & Branding, Free…

Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover

Published · Updated

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.8epss 0.6%
from disclosure to weapon0 days
Published on NVDJun 19
1st PoCJun 19
exploitation probability
0.6%top 50% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
wpmudev · Branda – White Label & Branding, Free Login Page Customizer
public PoCs found — 3
githubgithub.com/Polosss/By-Poloss..-..CVE-2026-11551-PoC★ 1githubgithub.com/xxconi/2026-11551★ 0githubgithub.com/ubaydev/CVE-2026-11551-PoC★ 0
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — wpmudev Branda – White Label & Branding, Free…

In the same product, most dangerous first.

CVE-2025-14998CRITICALBranda – White Label & Branding, Free Login Page Customizer <= 3.4.24 - Unauthenticated Privilege Escalation via Account TakeoverEPSS 1.9%CVE-2024-9371MEDIUMBranda – White Label & Branding, Custom Login Page Customizer <= 3.4.19 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2024-6554MEDIUMBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.18 - Unauthenticated Full Path DisclosureEPSS 0.5%CVE-2024-5191MEDIUMBranda – White Label WordPress, Custom Login Page Customizer <= 3.4.17 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadEPSS 0.3%
References
https://plugins.trac.wordpress.org/browser/branda-white-labeling/tags/3.4.29/inc/modules/login-screen/signup-password.php#L232https://plugins.trac.wordpress.org/changeset/3568291/branda-white-labeling/trunk/inc/modules/login-screen/signup-password.phphttps://www.wordfence.com/threat-intel/vulnerabilities/id/56f13af3-71b6-42d4-9fda-a75778f32091?source=cve