Now officially on WordPress.org

CVE Database / CVE-2022-4327

CVE

CVE-2022-4327 — Anti-Malware Security and Brute-Force Firewall [gotmls] < 4.21.86

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-4327 Anti-Malware Security and Brute-Force Firewall [gotmls] < 4.21.86 — Unknown < 4.21.86 4.21.86 2022-12-21 —

CVE-2022-4327

The Anti-Malware Security and Brute-Force Firewall plugin before version 4.21.86 contains a PHP Object Injection flaw that could be exploited by an attacker to carry out code injection, SQL injection, path traversal, and denial of service attacks. This vulnerability potentially enables an attacker to gain complete control of the affected website. The issue has been resolved in version 4.21.86 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings