CVE-2021-4425

The Defender Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.6. This is due to missing or incorrect nonce validation on the verifyotplogintime function. This makes it possible for unauthenticated attackers to verify a one time login...

PT-2023-12538

Name of the Vulnerable Software and Affected Versions Defender Security plugin for WordPress versions up to, and including, 2.4.6 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the verify otp login time function. This allows...