Wpmudev Defender Security — known CVE vulnerabilities

Every CVE whose affected-product data names Wpmudev Defender Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-5089 — CVSS 5.3 (medium): The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function…
• CVE-2023-51490 — CVSS 5.3 (medium): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPMU DEV Defender Security – Malware Scanner, Login Security…
• CVE-2021-4425 — CVSS 4.3 (medium): The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6. This is due…