WordPress plugin
Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Missing Authorization to Unauthenticated IP Address Whitelist ≤4.51Update to 4.52 | CVE-2024-1860 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Table Truncation ≤4.52Update to 4.53 | CVE-2024-1861 | |
| Medium4.3 | Cross-Site Request Forgery via antihacker_ajax_scan <4.35Update to 4.35 | CVE-2023-50858 | |
| Medium6.5 | Missing Authorization to Arbitrary Plugin Install ≤4.19Update to 4.20 | CVE-2022-3880 |
- Medium6.5Missing Authorization to Unauthenticated IP Address Whitelist
≤4.51Update to 4.52
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Table Truncation
≤4.52Update to 4.53
- Medium4.3Cross-Site Request Forgery via antihacker_ajax_scan
<4.35Update to 4.35
- Medium6.5Missing Authorization to Arbitrary Plugin Install
≤4.19Update to 4.20
Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: common questions
Does Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: 4 medium. None are known to affect version null.
How do I check which version of Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan vulnerability?
CVE-2024-1860, published Feb 27, 2024: Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.51 - Missing Authorization to Unauthenticated IP Address Whitelist. Severity: Medium (CVSS 6.5).
Is any Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan vulnerability listed in CISA KEV?
No. None of the known Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan vulnerabilities is currently listed in the CISA KEV catalog.