Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: wpmudev Component: Defender Security Clear all filters
TI-2023-28142 CVE-2023-51490 · GHSA-gh6x-qpj6-x25r

WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure

Priority LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security &…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2024-01-08 No fix listed CWE-532
TI-2023-04683 CVE-2023-5089 · GHSA-j6r3-vq2c-4ghw

Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

Priority MEDIUM 63

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02473 Published 2023-10-16 Fixed in 4.1.0
TI-2021-03282 CVE-2021-4425 · GHSA-wmpx-27x6-m5w5

Defender Security <= 2.4.6 - Cross-Site Request Forgery Bypass

Priority LOW 21

The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00563 Published 2023-07-12 No fix listed CWE-352