WordPress Plugin Vulnerabilities

Defender Security < 4.2.1 - Masked Login Area Security Feature Bypass

Description

The Defender Security – Malware Scanner, Login Security & Firewall plugin for WordPress is vulnerable to security feature bypass in all versions up to, and including, 4.2.0. This is due to an unspecified issue. This makes it possible for unauthenticated attackers to bypass the login masking security feature.

Affects Plugins

Fixed in 4.2.1

References

Miscellaneous

Original Researcher
Naveen Muthusamy
Verified
No

Timeline

Publicly Published
2023-11-03 (about 2 years ago)
Added
2023-11-24 (about 2 years ago)
Last Updated
2023-11-24 (about 2 years ago)

Other