White Label CMS
White Label CMS has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2012 and 2026; all 8 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 3 high. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 5 of the records (63%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data.
Every one of the 8 issues recorded for White Label CMS has a vendor fix available, so running the current release closes all known holes.
6 independent researchers contributed these findings, most of them (2) reported by Krzysztof Zając. White Label CMS is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2022-4302White Label CMS <= 2.4 - Authenticated (Administrator+) PHP Object Injection
Read the full analysisVulnerability Records

White Label CMS
Author
Video User Manuals
The White Label CMS plugin is for developers who want to give their clients a more personalised and less confusing content management system. For a overview of the changes in 2.0 version of the plugin please visit the Video User Manuals website. Features Customize the login page Add your branding to the header and footer Customize the dashboard Control which menus appear for your client Setting up a customized dashboard can be done in seconds using the White Label CMS Wizard Customize The Login Page Impress your clients with a branded login page. Add yours or your client’s logo, add a background image and even control the CSS if you wish. Personalising the back end of WordPress will give your client the feeling that this is their website, not a generic website. Add Your Branding to the Header and Footer Stay top of mind with your client by adding your branding to the admin bar, menu or footer. Customize the Dashboard Are you tired of telling your clients to ignore everything on the Dashboard, but then still receive questions because they’re confused or have broken something? With White Label CMS you can clear everything from the dashboard and add in your own dashboard panel. You can even add your own RSS feed so your clients can be kept up to date with what you are doing in your business. Which is much more relevant to your client than where and when the next WordPress Meetup is. Add your own welcome dashboard, and now you can use an Elementor or Beaver Builder template to make it look beautiful. Control with Menus Appear for Your Client We have created a new feature called the White Label CMS admin which allows you to hide menus for other users. Setup is simple and gives clients admin access with some restrictions making it harder for them to stumble across settings and mess up the site. Setup a Site in Seconds Using the Wizard Setting up a customized dashboard is easy and quick using the White Label CMS Wizard. With just a few clicks, you can add your branding and your client’s details and be up and running in seconds. There is so much that you can do with White Label CMS, but we want the experience to be simple. The Wizard allows you to set up a clutter-free, customized dashboard without having to scroll through all of the options that are available to you.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C