Solid Security – Password, Two Factor Authentication, and Brute Force Protection

Vulnerabilities 43Slug better-wp-securityLatest version 9.4.7WordPress.org →

Minimum safe version

9.3.2

Update to 9.3.2 or later to address 43 fixable vulnerabilities

Latest available9.4.7 ✓
N/A
< 9.0.1

Solid Security Basic &lt; 9.0.1 - Unauthenticated Login Page Disclosure

WPScan
N/A
2023-11-01< 9.0.1

WordPress Solid Security Plugin <= 9.0.0 is vulnerable to Sensitive Data Exposure

Patchstack
N/A
2023-10-31< 9.0.1

Solid Security Basic <= 9.0.0 - Unauthenticated Login Page Disclosure

Wordfence
N/A
2012-08-20< 3.4.4

iThemes Security < 3.4.4 - Cross-Site Scripting

Wordfence
N/A
2014-08-01< 3.6.4

Better WP Security <= 3.6.3 - Stored Cross-Site Scripting

Wordfence
N/A
2014-08-01< 3.6.4

iThemes Security < 3.6.4 - Stored Cross-Site Scripting

Wordfence
N/A
2014-08-01< 3.5.4

Better WP Security <= 3.5.3 - Stored Cross-Site Scripting

Wordfence
N/A
2015-04-14< 4.6.13

iThemes Security <= 4.6.12 - Stored Cross-Site Scripting

Wordfence
N/A
2016-04-05< 5.3.5

iThemes Security < 5.3.5 - Authenticated Cross-Site Scripting

Wordfence
N/A
2016-04-21< 5.3.1

iThemes Security < 5.3.1 - Insecure Backup/Logfile Generation

Wordfence
N/A
2016-04-25< 5.3.6

iThemes Security <= 5.3.5 - Missing Capabilities Check

Wordfence
N/A
2016-09-27< 5.6.2

iThemes Security <= 5.6.1 - Sensitive Information Exposure via Diff Response

Wordfence
N/A
2016-10-06< 5.6.2

iThemes Security <= 5.6.1 - Stored Cross-Site Scripting

Wordfence
N/A
2021-04-22< 7.9.1

iThemes Security < 7.9.1 and iThemes Security Pro < 6.8.4 - Hidden Login Bypass

Wordfence
N/A
< 4.0.0

wpscan.com

WPScan
N/A
< 3.6.4

wpscan.com

WPScan
N/A
< 3.5.6

wpscan.com

WPScan
N/A
< 3.4.4

wpscan.com

WPScan
N/A
< 3.5.4

Better WP Security &lt;= 3.5.3 - inc/secure.php logevent Function URL H&amp;ling Stored XSS

WPScan
N/A
< 4.6.13

iThemes Security 3.0-4.6.12 &ndash; Stored Cross-Site Scripting (XSS)

WPScan
N/A
< 5.3.5

iThemes Security &lt;= 5.3.4 - Potential Authenticated DOM Cross-Site Scripting (XSS)

WPScan
N/A
< 5.3.1

iThemes Security &lt;= 5.3.0 - Insecure Backup/Logfile Generation

WPScan
N/A
< 5.3.6

iThemes Security &lt;= 5.3.5 - Lack of Capability Check

WPScan
N/A
< 5.6.2

iThemes Security &lt;= 5.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

WPScan
N/A
< 7.9.1

iThemes Security Free (&lt; 7.9.1) &amp; Pro (&lt; 6.8.4) - Hide Backend Bypass

WPScan
N/A
2015-05-15< 4.0.0

WordPress Better WP Security Plugin <= 3.6.3 - XSS

Patchstack
N/A
2015-05-15< 3.5.6

WordPress Better WP Security Plugin <= 3.5.5 - Stored XSS

Patchstack
N/A
2015-05-15< 3.6.4

WordPress Better WP Security Plugin <= 3.6.3 - Stored XSS

Patchstack
N/A
2015-05-15< 3.4.4

WordPress Better WP Security Plugin <= 3.4.3 - Multiple XSS

Patchstack
N/A
2013-08-02< 3.5.4

WordPress Better WP Security Plugin - Stored XSS

Patchstack
N/A
2015-10-18< 4.6.13

WordPress iThemes Security Plugin <= 4.6.12 - Stored XSS

Patchstack
N/A
2016-04-05< 5.3.5

WordPress iThemes Security Plugin <= 5.3.4 - DOM XSS

Patchstack
N/A
2016-04-22< 5.3.1

WordPress iThemes Security Plugin <= 5.3.0 - Bypass

Patchstack
N/A
2016-04-25< 5.3.6

WordPress iThemes Security Plugin <= 5.3.5 - Bypass

Patchstack
N/A
2016-10-06< 5.6.2

WordPress iThemes Security Plugin <= 5.6.1 - Stored XSS

Patchstack
N/A
2021-04-21< 7.9.1

WordPress iThemes Security plugin <= 7.9.0 - Hide Backend Bypass vulnerability

Patchstack
High 7.2
2018-06-25< 7.0.3

WordPress iThemes Security plugin <= 7.0.2 - Authenticated SQL Injection (SQLi) vulnerability

PatchstackWordfenceCVEWPScan