WordPress plugin
Defender Security – Malware Scanner, Login Security & Firewall security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium6
- Low0
All Defender Security – Malware Scanner, Login Security & Firewall vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Administrator+) Remote Code Execution <6.2.0Update to 6.2.0 | CVE-2026-19225 | |
| Medium5.3 | Missing Authorization ≤4.7.2Update to 4.7.3 | CVE-2024-37444 | |
| Medium6.5 | IP Address Spoofing ≤4.4.1Update to 4.4.2 | CVE-2024-25595 | |
| Medium5.3 | Sensitive Information Exposure via Log File ≤4.1.0Update to 4.2.0 | CVE-2023-51490 | |
| Medium5.3 | Masked Login Area Security Feature Bypass ≤4.2.0Update to 4.2.1 | CVE-2023-47189 | |
| Medium5.3 | Hide Login Page Feature Protection Bypass ≤4.0.2Update to 4.1.0 | CVE-2023-5089 | |
| High7.5 | Sensitive Information Disclosure ≤3.3.2Update to 3.3.3 | CVE-2022-44581 | |
| Medium4.3 | Cross-Site Request Forgery Bypass ≤2.4.6Update to 2.4.6.1 | CVE-2021-4425 |
- High7.2Authenticated (Administrator+) Remote Code Execution
<6.2.0Update to 6.2.0
- Medium5.3Missing Authorization
≤4.7.2Update to 4.7.3
- Medium6.5IP Address Spoofing
≤4.4.1Update to 4.4.2
- Medium5.3Sensitive Information Exposure via Log File
≤4.1.0Update to 4.2.0
- Medium5.3Masked Login Area Security Feature Bypass
≤4.2.0Update to 4.2.1
- Medium5.3Hide Login Page Feature Protection Bypass
≤4.0.2Update to 4.1.0
- High7.5Sensitive Information Disclosure
≤3.3.2Update to 3.3.3
- Medium4.3Cross-Site Request Forgery Bypass
≤2.4.6Update to 2.4.6.1
Defender Security – Malware Scanner, Login Security & Firewall: common questions
Does Defender Security – Malware Scanner, Login Security & Firewall have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Defender Security – Malware Scanner, Login Security & Firewall: 2 high, 6 medium. None are known to affect version null.
How do I check which version of Defender Security – Malware Scanner, Login Security & Firewall I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Defender Security – Malware Scanner, Login Security & Firewall vulnerability?
CVE-2026-19225, published Aug 27, 2026: Defender Security – Malware Scanner, Login Security & Firewall < 6.2.0 - Authenticated (Administrator+) Remote Code Execution. Severity: High (CVSS 7.2).
Is any Defender Security – Malware Scanner, Login Security & Firewall vulnerability listed in CISA KEV?
No. None of the known Defender Security – Malware Scanner, Login Security & Firewall vulnerabilities is currently listed in the CISA KEV catalog.