Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Security Plugin, Firewall & Malware Scanner with Auto Removal 2.191 Clear all filters
TI-2026-82939 CVE-2026-114444 · GHSA-g4xh-fpq4-34j5

Sensitive data disclosure in Security by CleanTalk file viewer

Priority LOW 20

The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non…

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00227 Published 2026-10-30 Fixed in 2.191 CWE-200
TI-2026-82938 CVE-2026-114443 · GHSA-cf3c-vhpc-r6rv

Authentication bypass in WordPress Security plugin via 2FA code

Priority LOW 34

The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who hol…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-30 Fixed in 2.191 CWE-287