Extension WordPress
Vulnérabilités Defender Security – Malware Scanner, Login Security & Firewall
Cette page rassemble les failles publiées pour Defender Security – Malware Scanner, Login Security & Firewall, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Defender Security – Malware Scanner, Login Security & Firewall
7 fiches
Defender Security <= 4.7.2 – Missing Authorization
The Defender Security plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clear_config_transient() function in versions up to, and including, 4.7.2. This makes it possible for unauthenticated attackers to…
*-4.7.2
4.7.3
28/06/2024
Defender Security <= 4.4.1 – IP Address Spoofing
The Defender Security – Malware Scanner, Login Security & Firewall plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 4.4.1 due to user-supplied HTTP headers as a primary method for IP…
*-4.4.1
4.4.2
12/02/2024
Defender Security <= 4.1.0 – Sensitive Information Exposure via Log File
The Defender Security – Malware Scanner, Login Security & Firewall plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.1.0 via the plugin's log file. This makes it possible for unauthenticated…
*-4.1.0
4.2.0
27/12/2023
Defender Security <= 4.2.0 – Masked Login Area Security Feature Bypass
The Defender Security – Malware Scanner, Login Security & Firewall plugin for WordPress is vulnerable to security feature bypass in all versions up to, and including, 4.2.0. This is due to an unspecified issue. This makes it possible…
*-4.2.0
4.2.1
03/11/2023
Defender Security <= 4.0.2 – Hide Login Page Feature Protection Bypass
The Defender Security plugin for WordPress is vulnerable to protection bypass in versions up to, and including, 4.0.2. This is due to the plugin failing to prevent redirects via the auth_redirect WordPress function. This makes it possible for…
*-4.0.2
4.1.0
06/09/2023
Defender Security <= 3.3.2 – Sensitive Information Disclosure
The Defender Security plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 3.3.2. This is due to 2fa-codes being stored in plaintext. This makes it possible for unauthenticated attackers to access them…
*-3.3.2
3.3.3
23/11/2022
Defender Security <= 2.4.6 – Cross-Site Request Forgery Bypass
The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6. This is due to missing or incorrect nonce validation on the verify_otp_login_time() function. This makes it possible for unauthenticated…
*-2.4.6
2.4.6.1
01/03/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.