WordPress Plugin Vulnerabilities

MalCare < 6.72 - Unauthenticated DoS

Description

The plugin is vulnerable to Denial of Service due to insufficient validation of user supplied input. This makes it possible for unauthenticated attackers to make the affected site unavailable.

Affects Plugins

Plugin icon
malcare-security
Fixed in 6.72

References

CVE
CVE-2026-84776
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/c8399133-da13-48ec-a0d0-94e51d5f3e4f

Miscellaneous

Original Researcher
Ananda Dhakal
Verified
No
WPVDB ID
04d5e92d-05f3-4331-bc23-f246663b9d8e

Timeline

Publicly Published
2026-09-02 (about 1 month ago)
Added
2026-09-09 (about 1 month ago)
Last Updated
2026-09-09 (about 1 month ago)

Other

Published
Title
Published
2025-03-27
Title
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
Published
2026-08-03
Title
WP Maps < 4.9.7 - Subscriber+ Denial of Service
Published
2026-09-07
Title
WooCommerce < 11.1.0 - Unauthenticated DoS
Published
2025-03-20
Title
WP-GeSHi-Highlight <= 1.4.3 - Author+ ReDoS
Published
2016-08-20
Title
WordPress 4.5.3 - Authenticated Denial of Service (DoS)