CVE-2024-22144 WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.21.96 - Unauthenticated Predictable Nonce Brute-Force Leading to RCE vulnerability

🗓️ 25 Apr 2024 08:53:25Reported by PatchstackType

WordPress Anti-Malware Security and Brute-Force Firewall plugin vulnerabilit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
WPVulnDB	Anti-Malware Security and Brute-Force Firewall < 4.23.56 - Unauthenticated Remote Code Execution	8 May 202400:00	–	wpvulndb
Cvelist	CVE-2024-22144 WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.21.96 - Unauthenticated Predictable Nonce Brute-Force Leading to RCE vulnerability	25 Apr 202408:25	–	cvelist
CVE	CVE-2024-22144	25 Apr 202409:15	–	cve
Patchstack	WordPress Anti-Malware Security and Brute-Force Firewall Plugin <= 4.21.96 is vulnerable to Remote Code Execution (RCE)	12 Mar 202400:00	–	patchstack
NVD	CVE-2024-22144	25 Apr 202409:15	–	nvd

Source	Link
patchstack	www.patchstack.com/articles/critical-vulnerability-found-in-gotmls-plugin
sec	www.sec.stealthcopter.com/cve-2024-22144/
patchstack	www.patchstack.com/database/vulnerability/gotmls/wordpress-anti-malware-security-and-brute-force-firewall-plugin-4-21-96-unauthenticated-predictable-nonce-brute-force-leading-to-rce-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

25 Apr 2024 08:25Current

7.1High risk

Vulners AI Score7.1

CVSS39

EPSS0.01459

SSVC

CWE-94