superdav42 vulnerabilities

Products

• Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform 1

Latest superdav42 CVEs

Newest publication first

1. CVE-2026-75957 Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter

   Published 2026-10-01

   Critical·CVSS 9.8 EPSS 0.58%

   The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.15.0 via the checkout_form parameter of the login_customer_after_checkout function. This is due to the publicly ac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.