wpcerber records
4 published records for vendor wpcerber.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-287 Improper Authentication1
- CWE-693 Protection Mechanism Failure1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2021-37597No exploit | WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.wpcerber · wp cerber · CWE-287 | Critical9.8 | — | 2.1% | Aug 19, 2021 |
24Monitor | CVE-2016-10990No exploit | The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.wpcerber · cerber security antispam \& malware scan · CWE-79 | Medium6.1 | — | 1.4% | Sep 17, 2019 |
22Monitor | CVE-2021-37598Proof of concept | WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.wpcerber · wp cerber · CWE-863 | Medium5.3 | — | 2.4% | Aug 19, 2021 |
21Monitor | CVE-2022-4100No exploit | WP Cerber Security <= 9.4 - IP Protection Bypasswpcerber · cerber security antispam \& malware scan · CWE-693 | Medium5.3 | — | 0.3% | Aug 31, 2024 |
- CVE-2021-3759740Plan
WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.
CriticalCVSS 9.8No exploitEPSS 2%wpcerber · wp cerberAug 19, 2021
- CVE-2016-1099024Monitor
The wp-cerber plugin before 2.7 for WordPress has XSS via the X-Forwarded-For HTTP header.
MediumCVSS 6.1No exploitEPSS 1%wpcerber · cerber security antispam \& malware scanSep 17, 2019
- CVE-2021-3759822Monitor
WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.
MediumCVSS 5.3Proof of conceptEPSS 2%wpcerber · wp cerberAug 19, 2021
- CVE-2022-410021Monitor
WP Cerber Security <= 9.4 - IP Protection Bypass
MediumCVSS 5.3No exploitEPSS 0%wpcerber · cerber security antispam \& malware scanAug 31, 2024