Wpmudev

Defender Security

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-37444

  • EPSS 0.49%
  • Published 01.11.2024 15:15:25
  • Last modified 28.05.2025 21:19:12

Missing Authorization vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.7.1.

9.8

CVE-2023-47189

  • EPSS 0.74%
  • Published 04.06.2024 10:15:11
  • Last modified 29.05.2025 16:33:51

Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0.

5.3

CVE-2024-25595

  • EPSS 0.11%
  • Published 17.05.2024 09:15:25
  • Last modified 28.05.2025 21:18:46

Authentication Bypass by Spoofing vulnerability in WPMU DEV Defender Security allows Functionality Bypass.This issue affects Defender Security: from n/a through 4.4.1.

9.8

CVE-2022-44581

  • EPSS 0.33%
  • Published 17.05.2024 07:15:46
  • Last modified 28.05.2025 21:19:20

Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2.

7.5

CVE-2023-51490

  • EPSS 0.69%
  • Published 08.01.2024 21:15:09
  • Last modified 21.11.2024 08:38:13

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4....

5.3

CVE-2023-5089

Exploit
  • EPSS 80%
  • Published 16.10.2023 20:15:17
  • Last modified 23.04.2025 17:16:49

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of th...

4.3

CVE-2021-4425

Exploit
  • EPSS 0.13%
  • Published 12.07.2023 08:15:09
  • Last modified 21.11.2024 06:37:41

The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6. This is due to missing or incorrect nonce validation on the verify_otp_login_time() function. This makes it possible for u...