Vulnerabilities / Defender Security
Defender Security vulnerabilities
Advisories WPSec published for Defender Security – Malware Scanner, Login Security & Firewall. Other sources may list more. Its attack surface: Defender Security on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0305 | Defender Security <= 6.2.4 - Unauthenticated Firewall Lockout Bypass via 'wpmudev_is_staff' Cookie | Low 3.7 | 6.3.0 |
| 2026-10-02 | WPSEC-2026-0304 | Defender Security <= 6.2.4 - Cross-Site Request Forgery to Two-Factor Authentication Reset | Medium 4.3 | 6.3.0 |
| 2026-10-02 | WPSEC-2026-0303 | Defender Security <= 6.2.4 - Unauthenticated Privilege Escalation via Account Takeover in Masked Login Password Reset | High 7.5 | 6.3.0 |
License: CC BY 4.0