Defender Security Wpmudev Defender Security

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Wpmudev Defender Security.

By the Year

In 2026 there have been 0 vulnerabilities in Wpmudev Defender Security. Defender Security did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 5 6.58
2023 2 4.80

It may take a day or so for new Defender Security vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Wpmudev Defender Security Security Vulnerabilities

WPMU DEV Defender Security 4.7.1 Missing Auth ACL Bypass
CVE-2024-37444 5.3 - Medium - November 01, 2024

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1.

AuthZ

Defender Security Improper Auth ACL Bypass (4.2.0)
CVE-2023-47189 9.8 - Critical - June 04, 2024

Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0.

authentification

WPMU DEV Defender Security Auth Bypass Vulnerability (4.4.1)
CVE-2024-25595 5.3 - Medium - May 17, 2024

Authentication Bypass by Spoofing vulnerability in WPMU DEV Defender Security allows Functionality Bypass.This issue affects Defender Security: from n/a through 4.4.1.

Authentication Bypass by Spoofing

Insecure Storage of Sensitive Info WPMU DEV Defender Security v<=3.3.2
CVE-2022-44581 5 - Medium - May 17, 2024

Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2.

Insecure Storage of Sensitive Information

WPMU DEV Defender Security Sensitive Info Disclosure, <4.1.0
CVE-2023-51490 7.5 - High - January 08, 2024

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security Malware Scanner, Login Security & Firewall.This issue affects Defender Security Malware Scanner, Login Security & Firewall: from n/a through 4.1.0.

Insertion of Sensitive Information into Log File

Defender Security WP Plugin <4.1.0: Auth Redirect Allows Unauth Login
CVE-2023-5089 5.3 - Medium - October 16, 2023

The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.

Generation of Error Message Containing Sensitive Information

WordPress Defender Security Plugin 2.4.6 CSRF via verify_otp_login_time
CVE-2021-4425 4.3 - Medium - July 12, 2023

The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6. This is due to missing or incorrect nonce validation on the verify_otp_login_time() function. This makes it possible for unauthenticated attackers to verify a one time login via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Session Riding

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Wpmudev Defender Security or by Wpmudev? Click the Watch button to subscribe.

Wpmudev
Vendor

subscribe