CVE-2026-11551
CRITICALBranda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover
Title source: cnaExploitation Summary
EIP tracks 3 public exploits for CVE-2026-11551. PoCs published by ubaydev, xxconi, Polosss.
AI-analyzed exploit summary This repository contains a functional PoC demonstrating a privilege escalation vulnerability in White Label & Branding, Free Login Page Customizer <= 3.4.29. The exploit leverages a double-hashing issue in the Branda module's filter, leading to account takeover and admin lockout.
Description
The Branda plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.29. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
Exploits (3)
This repository contains a functional PoC demonstrating a privilege escalation vulnerability in White Label & Branding, Free Login Page Customizer <= 3.4.29. The exploit leverages a double-hashing issue in the Branda module's filter, leading to account takeover and admin lockout.
This repository contains a functional exploit for CVE-2026-11551, an unauthenticated privilege escalation vulnerability in the Branda White Label & Branding plugin (≤3.4.29). The exploit leverages a missing conditional check in the `pre_insert_user_data` hook, allowing password overwrites for existing users via registration or activation flows.
This repository provides a detailed technical analysis of CVE-2026-11551, an unauthenticated privilege escalation vulnerability in the Branda WordPress plugin. It includes root cause analysis, patch comparison, and proof-of-concept curl commands for exploitation.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H