Unknown Defender Security vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Defender Security, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2026-19225unknowndefender security+1
EPSS score
0.28%
The Defender Security WordPress plugin before 6.2.0 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.5.3CVE-2023-5089unknowndefender security+2
EPSS score
2.47%
The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled.