CVE-2022-44581 - WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability

Back Back to CVE browser

CRITICAL

WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability

Published May 17, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.68%

Description

Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affects Defender Security: from n/a through 3.3.2.

Affected products

Vendor Wpmu Dev Product Defender Security Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <=3.3.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Wpmu Dev

Defender Security

unaffected

Version	Status	Constraints
-	affected	<=3.3.2

Vendor Wpmudev Product Defender Security Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=3.3.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Wpmudev

Defender Security

n/a

Version	Status	Constraints
0	affected	<=3.3.2

Remediation

Vendor solution

Update to 3.3.3 or a higher version.

Weaknesses (1)

CWE-922

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47519
Advisory
https://patchstack.com/database/vulnerability/defender-security/wordpress-defender-security-plugin-3-3-2-broken-authentication-vulnerability?_s_id=cve
vdb-entryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-47519		Advisory
https://patchstack.com/database/vulnerability/defender-security/wordpress-defender-security-plugin-3-3-2-broken-authentication-vulnerability?_s_id=cve		vdb-entryThird Party Advisory