Approved changes feed: RSS · Atom

cpe:2.3:a:scheeeli:anti-malware_security_and_brute-force_firewall:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorScheeeli (70f8ae89-aeaa-52fa-9b95-9b5c97fae553)
ProductAnti Malware Security And Brute Force Firewall (1da41251-8c8c-5a47-8bb1-dcdf2b55914e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11705 vulnerable 2026-06-08 07:04:28.792500 Anti-Malware Security and Brute-Force Firewall <= 4.23.81 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
MEDIUM (6.5)
The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.23.81 due to a missing capability check combined with an information exposure in several GOTMLS_* AJAX actions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2025-10-29T04:27:11.600Z
Updated: 2026-04-08T17:29:16.971Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.