Approved changes feed: RSS · Atom

cpe:2.3:a:wp-experts:protect_wp_admin:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWp Experts (cfd7e81e-974c-5460-8d69-4a610326b9c5)
ProductProtect Wp Admin (9b0c5d42-0d04-5f9e-911c-fc6a74af6cc4)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/protect-wp-admin purl2cpe 2026-06-01 10:12:15.108699
pkg:github/wpplugins/protect-wp-admin purl2cpe 2026-06-01 10:12:15.108702

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3139 vulnerable 2026-06-08 06:09:38.657722 Protect WP Admin < 4.0 - Unauthenticated Protection Bypass
The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.
Published: 2023-07-04T07:23:27.209Z
Updated: 2024-11-22T15:31:30.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24906 vulnerable 2026-06-08 05:30:39.598633 Protect WP Admin < 3.6.2 - Unauthenticated Plugin Deactivation
The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted request
Published: 2022-01-24T08:00:53.000Z
Updated: 2024-08-03T19:49:14.366Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.