security_plugin_firewall_malware_scanner_with_auto_removal vulnerabilities
CVEs whose affected-version data names the security_plugin_firewall_malware_scanner_with_auto_removal package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114443High· 7.5Security by CleanTalk < 2.191 - Unauthenticated Authentication Bypass via Authenticator App Code
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not verify the account password before accepting an authenticator-app two-factor code at login, allowing anyone who holds a user's curre…
▾ TwilightEPSS 0.19%via CVEORG
CVE-2026-114444Medium· 4.4Security by CleanTalk < 2.191 - Admin+ Sensitive Data Disclosure via FSWatcher File Viewer
The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before 2.191 does not restrict its File System Watcher file viewer to Super Admins or to the files it legitimately tracks, allowing a non-super-admin admi…
▾ SunlitEPSS 0.23%via CVEORG