Vulnerabilities

TI-2024-01733 CVE-2024-1861 · GHSA-gpw4-cp4w-g7v7

Missing authorization in sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback…

LOW 20

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_t…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00361 Published 2024-02-28 No fix listed CWE-862

TI-2024-01732 CVE-2024-1860 · GHSA-w6wm-9q8x-p5h7

Missing authorization in sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback…

LOW 35

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_a…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00375 Published 2024-02-28 No fix listed CWE-862

TI-2023-27763 CVE-2023-50858 · GHSA-3gj6-gfv8-qhwj

WordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Ping…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00196 Published 2023-12-28 No fix listed CWE-352

Vulnerabilities

Filters

Missing authorization in sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback…

Missing authorization in sminozzi Disable Json API, Login Lockdown, XMLRPC, Pingback…

WordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)