Security Hardener vulnerabilities

1 known vulnerability in Security Hardener from Marc4. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Security Hardener: Improper Privilege Management

  CVE-2026-16149Aug 23, 2026Marc4

  The Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerability exists because the plugin's user-enumeration protection, which is enabled by default, hooks the rest_endpoints filt