CVE-2026-75957

Published 1 October 2026 · tracked since 1 October 2026

Description

The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.15.0 via the `checkout_form` parameter of the `login_customer_after_checkout` function. This is due to the publicly accessible `wu_aja

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-97661 HIGH 7.2
• CVE-2026-92244 HIGH 7.2
• CVE-2026-95687 HIGH 8.8
• CVE-2026-96268 MEDIUM 6.4
• CVE-2026-96573 HIGH 7.2
• CVE-2026-96813 HIGH 7.2
• CVE-2026-15983 HIGH 8.1
• CVE-2026-85235 HIGH 7.2
• CVE-2026-89424 MEDIUM 6.4
• CVE-2026-90992 MEDIUM 6.4

→ Open the live CVE board · all tools