Read the docs

malcure

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

malcure records in CISA KEV

No malcure vulnerabilities are listed in CISA KEV.

Records

2 records

Priority LOW 36

The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Deletion due to a missing capability check on the wpmr_delete_file() function in all versions up…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00673 Published 2025-07-16 No fix listed CWE-862
Priority LOW 29

The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 16.8 via the wpmr_inspect_file() function due to a mi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00361 Published 2025-07-18 No fix listed CWE-862
Open these records in search →