Approved changes feed: RSS · Atom

cpe:2.3:a:wpmudev:defender_security:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorWpmudev (a4908a28-206b-5801-853a-92926b63e5e8)
ProductDefender Security (bda24829-2d1a-509f-baf8-2436c9608f79)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37444 vulnerable 2026-06-08 06:39:47.584065 WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through <= 4.7.1.
Published: 2024-11-01T14:18:21.188Z
Updated: 2026-04-28T16:09:59.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25595 vulnerable 2026-06-08 06:31:23.332033 WordPress Defender Security plugin <= 4.4.1 - IP Restriction Bypass vulnerability
MEDIUM (5.3)
Authentication Bypass by Spoofing vulnerability in WPMU DEV Defender Security allows Functionality Bypass.This issue affects Defender Security: from n/a through 4.4.1.
Published: 2024-05-17T08:23:10.160Z
Updated: 2026-04-28T16:09:12.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5089 vulnerable 2026-06-08 06:19:41.457445 Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)
The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.
Published: 2023-10-16T19:39:25.420Z
Updated: 2025-04-23T16:10:59.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51490 vulnerable 2026-06-08 06:16:17.630183 WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure
MEDIUM (5.3)
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security & Firewall.This issue affects Defender Security – Malware Scanner, Login Security & Firewall: from n/a through 4.1.0.
Published: 2024-01-08T20:17:34.600Z
Updated: 2026-04-28T16:09:02.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47189 vulnerable 2026-06-08 06:14:24.214747 WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability
MEDIUM (5.3)
Improper Authentication vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.2.0.
Published: 2024-06-04T09:31:14.044Z
Updated: 2026-04-28T16:08:48.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44581 vulnerable 2026-06-08 05:49:35.668442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4425 vulnerable 2026-06-08 05:38:09.400169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.