WordPress plugin
Enhanced Plugin Admin security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Enhanced Plugin Admin vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Cross-Site Request Forgery via epa_options_page ≤1.16Update to 1.17 | CVE-2023-28618 | |
| Medium6.1 | Reflected Cross-Site Scripting <1.16Update to 1.16 | — |
- Medium5.4Cross-Site Request Forgery via epa_options_page
≤1.16Update to 1.17
- Medium6.1Reflected Cross-Site Scripting
<1.16Update to 1.16
Enhanced Plugin Admin: common questions
Does Enhanced Plugin Admin have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Enhanced Plugin Admin: 2 medium. None are known to affect version null.
How do I check which version of Enhanced Plugin Admin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Enhanced Plugin Admin vulnerability?
CVE-2023-28618, published Mar 21, 2023: Enhanced Plugin Admin <= 1.16 - Cross-Site Request Forgery via epa_options_page. Severity: Medium (CVSS 5.4).
Is any Enhanced Plugin Admin vulnerability listed in CISA KEV?
No. None of the known Enhanced Plugin Admin vulnerabilities is currently listed in the CISA KEV catalog.