Plugin icon

Solid Security – Password, Two Factor Authentication, and Brute Force Protection

better-wp-security

Vulnerabilities:

16

Last Updated:

November 18, 2025

Active Installs:

800000

Published
Title
Fixed in
CVSS
Published
2024-06-20
Title
Solid Security < 9.3.2 - IP Address Spoofing to Denial of Service
Fixed in
Fixed in 9.3.2
CVSS
5.3 (medium)
Published
2023-10-31
Title
Solid Security Basic < 9.0.1 - Unauthenticated Login Page Disclosure
Fixed in
Fixed in 9.0.1
CVSS
5.3 (medium)
Published
2021-04-21
Title
iThemes Security Free (< 7.9.1) & Pro (< 6.8.4) - Hide Backend Bypass
Fixed in
Fixed in 7.9.1
CVSS
5.3 (medium)
Published
2018-06-22
Title
iThemes Security <= 7.0.2 - Authenticated SQL Injection
Fixed in
Fixed in 7.0.3
CVSS
7.2 (high)
Published
2018-03-05
Title
iThemes Security <= 6.9.0 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 6.9.1
CVSS
7.5 (high)
Published
2016-10-06
Title
iThemes Security <= 5.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 5.6.2
CVSS
n/a
Published
2016-04-25
Title
iThemes Security <= 5.3.5 - Lack of Capability Check
Fixed in
Fixed in 5.3.6
CVSS
n/a
Published
2016-04-21
Title
iThemes Security <= 5.3.0 - Insecure Backup/Logfile Generation
Fixed in
Fixed in 5.3.1
CVSS
n/a
Published
2016-04-05
Title
iThemes Security <= 5.3.4 - Potential Authenticated DOM Cross-Site Scripting (XSS)
Fixed in
Fixed in 5.3.5
CVSS
n/a
Published
2015-04-14
Title
iThemes Security 3.0-4.6.12 – Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.6.13
CVSS
n/a
Published
2014-08-01
Title
Better WP Security 3.6.3 - /wp-admin/admin-ajax.php license Parameter Stored XSS Weakness
Fixed in
Fixed in 3.6.4
CVSS
n/a
Published
2014-08-01
Title
Better WP Security <= 3.5.3 - inc/secure.php logevent Function URL H&ling Stored XSS
Fixed in
Fixed in 3.5.4
CVSS
n/a
Published
2014-08-01
Title
Better WP Security 3.6.3 - Online Backup Storage current_time Function Brute Force Disclosure
Fixed in
Fixed in 4.0.0
CVSS
n/a
Published
2014-08-01
Title
Better WP Security 3.5.5 - inc/admin/content.php id_specialfile Parameter Stored XSS
Fixed in
Fixed in 3.5.6
CVSS
n/a
Published
2014-08-01
Title
Better WP Security 3.4.3 - Multiple XSS
Fixed in
Fixed in 3.4.4
CVSS
n/a
Published
2012-05-11
Title
Better WP Security <= 3.2.4 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 3.2.5
CVSS
n/a