Known vulnerabilities in the Wordpress Security plugin

5 security advisories have been published for the Wordpress Security plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Wordpress Security - Cross-Site Request Forgery (CSRF) (CVE-2025-9946) MEDIUM 2025-09-30
Wordpress Security - Broken Access Control (CVE-2025-3452) MEDIUM 2025-04-29
Wordpress Security - Cross-Site Scripting (XSS) (CVE-2024-9019) MEDIUM 2025-02-28
Wordpress Security - Cross-Site Request Forgery (CSRF) (CVE-2024-1504) MEDIUM 2024-04-02
Wordpress Security - Cross-Site Scripting (XSS) (CVE-2022-1028) MEDIUM 2022-06-27

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.