CVE-2024-1860

🗓️ 28 Feb 2024 09:33:34Reported by WordfenceType

The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the antihacker_add_whitelist() function in all versions up to, and including, 4.51

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-1860	28 Feb 202411:31	–	circl
CNNVD	WordPress Plugin Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan Security Vulnerabilities	28 Feb 202400:00	–	cnnvd
Cvelist	CVE-2024-1860 Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.51 - Missing Authorization to Unauthenticated IP Address Whitelist	28 Feb 202409:33	–	cvelist
EUVD	EUVD-2024-17585	3 Oct 202520:07	–	euvd
NVD	CVE-2024-1860	28 Feb 202410:15	–	nvd
Patchstack	WordPress Anti Hacker Plugin <= 4.51 is vulnerable to Broken Access Control	28 Feb 202400:00	–	patchstack
Prion	Design/Logic Flaw	28 Feb 202410:15	–	prion
Positive Technologies	PT-2024-18369 · WordPress · Disable Json Api	28 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-1860	23 May 202509:41	–	redhatcve
Vulnrichment	CVE-2024-1860 Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan <= 4.51 - Missing Authorization to Unauthenticated IP Address Whitelist	28 Feb 202409:33	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

billminozzi anti_hackerRange<4.52wordpress

[
  {
    "vendor": "sminozzi",
    "product": "Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.51",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3d365284-73ac-4730-a83d-9202677cf161
plugins	www.plugins.trac.wordpress.org/changeset

08 Apr 2026 18:20Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.15.3 - 6.5

EPSS0.00199

SSVC

CWE-862