My Wp Brand Vulnerabilities

The My Wp Brand – Hide menu & Hide Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they...

CVSS:

4.3

Affected:

up to 1.1.3

Fixed in:

1.1.4

Disclosed:

Jun 27, 2025

CVE-2025-53269 on NVD →

The My Wp Brand – Hide menu & Hide Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mwb_plugins_form() and mwb_style_ajax() function in versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to modify settings.

CVSS:

5.3

Affected:

up to 1.1.2

Fixed in:

1.1.3

Disclosed:

Oct 21, 2024

CVE-2024-49694 on NVD →