Plugin icon

Branda – White Label & Branding, Free Login Page Customizer

branda-white-labeling

Vulnerabilities:

6

Last Updated:

December 29, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-01-01
Title
Branda – White Label & Branding, Free Login Page Customizer < 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover
Fixed in
Fixed in 3.4.29
CVSS
9.8 (critical)
Published
2024-11-20
Title
Branda – White Label & Branding, Custom Login Page Customizer < 3.4.22 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.4.22
CVSS
6.1 (medium)
Published
2024-07-10
Title
Branda – White Label WordPress, Custom Login Page Customizer < 3.4.19 - Unauthenticated Full Path Disclosure
Fixed in
Fixed in 3.4.19
CVSS
5.3 (medium)
Published
2024-06-28
Title
Branda < 3.4.18 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.4.18
CVSS
4.4 (medium)
Published
2024-06-20
Title
Branda – White Label WordPress, Custom Login Page Customizer < 3.4.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Fixed in
Fixed in 3.4.18
CVSS
6.4 (medium)
Published
2023-12-27
Title
Branda < 3.4.15 - IP Spoofing
Fixed in
Fixed in 3.4.15
CVSS
5.3 (medium)