PRODUCT PROFILE

better-wp-security

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

低危2026/01/14

WordPress Plugin iThemes Security - Full Path Disclosure

WordPress Plugin iThemes Security files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly.

better-wp-securityPoC 已收录

CVSS—

中危2025/12/18

WordPress Solid Security < 9.0.1 - Unauthenticated Login Page Disclosure

WordPress Solid Security (formerly iThemes Security/Better WP Security) plugin before 9.0.1 is vulnerable to login page disclosure. When the Hide Backend feature is enabled and comments require user registration, the secret login URL token is exposed in the HTML source via the itsec-hb-token parameter in the comment form login links.

better-wp-securityPoC 已收录

CVSS—