Malware Scanner vulnerabilities

2 known vulnerabilities in Malware Scanner from miniOrange. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Web Application Firewall – website security: Missing Critical Step in Authentication

  CVE-2024-2172Mar 13, 2024Cyberlord92EPSS 1.71%

  The Malware Scanner plugin and the Web Application Firewall plugin for WordPress (both by MiniOrange) are vulnerable to privilege escalation due to a missing capability check on the mo_wpns_init() function in all versions up to, and including, 4.7.2 (for Malwa

• 7.2 High severity

  Malware Scanner: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-25902Feb 28, 2024miniOrange

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Scanner: from n/a through 4.7.2.