WordPress plugin
Branda – White Label & Branding, Free Login Page Customizer security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High0
- Medium7
- Low0
All Branda – White Label & Branding, Free Login Page Customizer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤3.4.32Update to 3.4.33 | CVE-2026-102376 | |
| Critical9.8 | Unauthenticated Privilege Escalation via Account Takeover ≤3.4.29Update to 3.4.31 | CVE-2026-11551 | |
| Critical9.8 | Unauthenticated Privilege Escalation via Account Takeover ≤3.4.24Update to 3.4.29 | CVE-2025-14998 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.4.21Update to 3.4.22 | CVE-2024-9371 | |
| Medium5.3 | Unauthenticated Full Path Disclosure ≤3.4.18Update to 3.4.19 | CVE-2024-6554 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤3.4.17Update to 3.4.18 | CVE-2024-37239 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload ≤3.4.17Update to 3.4.18 | CVE-2024-5191 | |
| Medium5.3 | IP Address Spoofing ≤3.4.14Update to 3.4.15 | CVE-2023-51542 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤3.4.8.1Update to 3.4.9 | — |
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤3.4.32Update to 3.4.33
- Critical9.8Unauthenticated Privilege Escalation via Account Takeover
≤3.4.29Update to 3.4.31
- Critical9.8Unauthenticated Privilege Escalation via Account Takeover
≤3.4.24Update to 3.4.29
- Medium6.1Reflected Cross-Site Scripting
≤3.4.21Update to 3.4.22
- Medium5.3Unauthenticated Full Path Disclosure
≤3.4.18Update to 3.4.19
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤3.4.17Update to 3.4.18
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
≤3.4.17Update to 3.4.18
- Medium5.3IP Address Spoofing
≤3.4.14Update to 3.4.15
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤3.4.8.1Update to 3.4.9
Branda – White Label & Branding, Free Login Page Customizer: common questions
Does Branda – White Label & Branding, Free Login Page Customizer have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Branda – White Label & Branding, Free Login Page Customizer: 2 critical, 7 medium. None are known to affect version null.
How do I check which version of Branda – White Label & Branding, Free Login Page Customizer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Branda – White Label & Branding, Free Login Page Customizer vulnerability?
CVE-2026-102376, published Sep 30, 2026: Branda – White Label & Branding, Free Login Page Customizer <= 3.4.32 - Authenticated (Subscriber+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Branda – White Label & Branding, Free Login Page Customizer vulnerability listed in CISA KEV?
No. None of the known Branda – White Label & Branding, Free Login Page Customizer vulnerabilities is currently listed in the CISA KEV catalog.