WordPress Plugin Vulnerabilities

iThemes Security <= 5.3.5 - Lack of Capability Check

Description

The iThemes Security (formerly Better WP Security) WordPress plugin was affected by a Lack of Capability Check security vulnerability.

Affects Plugins

Plugin icon
better-wp-security
Fixed in 5.3.6

References

URL
https://secupress.me/blog/ithemes-security-5-3-6-security-fix/

Miscellaneous

Submitter
Julio Potier
Submitter twitter
secupress
Verified
No
WPVDB ID
c951364e-e6a4-40fa-9001-741a386c9825

Timeline

Publicly Published
2016-04-25 (about 10 years ago)
Added
2016-04-25 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2018-05-10
Title
BBE Theme < 1.53 - Direct Object Reference
Published
2020-02-29
Title
Booked < 2.2.6 - Broken Authentication to Export Users Data in CSV
Published
2022-05-18
Title
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
Published
2023-10-03
Title
Captcha/Honeypot for Contact Form 7 < 1.11.4 - Captcha Bypass
Published
2022-05-17
Title
iQ Block Country < 1.2.20 - Protection Bypass due to IP Spoofing