Wpmudev

Defender Security

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.49%
  • Veröffentlicht 01.11.2024 15:15:25
  • Zuletzt bearbeitet 28.05.2025 21:19:12

Missing Authorization vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.7.1.

  • EPSS 0.74%
  • Veröffentlicht 04.06.2024 10:15:11
  • Zuletzt bearbeitet 29.05.2025 16:33:51

Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0.

  • EPSS 0.11%
  • Veröffentlicht 17.05.2024 09:15:25
  • Zuletzt bearbeitet 28.05.2025 21:18:46

Authentication Bypass by Spoofing vulnerability in WPMU DEV Defender Security allows Functionality Bypass.This issue affects Defender Security: from n/a through 4.4.1.

  • EPSS 0.33%
  • Veröffentlicht 17.05.2024 07:15:46
  • Zuletzt bearbeitet 28.05.2025 21:19:20

Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2.

  • EPSS 0.69%
  • Veröffentlicht 08.01.2024 21:15:09
  • Zuletzt bearbeitet 21.11.2024 08:38:13

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4....

Exploit
  • EPSS 80%
  • Veröffentlicht 16.10.2023 20:15:17
  • Zuletzt bearbeitet 23.04.2025 17:16:49

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of th...

Exploit
  • EPSS 0.13%
  • Veröffentlicht 12.07.2023 08:15:09
  • Zuletzt bearbeitet 21.11.2024 06:37:41

The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6. This is due to missing or incorrect nonce validation on the verify_otp_login_time() function. This makes it possible for u...