Anti-Malware Security and Brute-Force Firewall <= 4.23.87 - Authenticated (Contributor+) PHP Object Injection
Anti-Malware Security and Brute-Force Firewall
Minimum safe version
4.23.88
Update to 4.23.88 or later to address 20 fixable vulnerabilities
CVE-2025-11705
CVE-2024-22144
Get Off Malicious Scripts - Cross-Site Scripting (XSS)
Anti-Malware & Brute-Force Security by ELI <= 4.15.17 - Multiple Reflected XSS
Anti-Malware & Brute-Force Security by ELI <= 4.15.22 - Stored XSS
Anti-Malware Security & Brute-Force Firewall <= 4.15.42 - XSS & CSRF
Anti-Malware Security and Brute-Force Firewall <= 4.21.85 - Authenticated (Admin+) PHP Object Injection
Anti-Malware Security and Brute-Force Firewall <= 4.15.22 - Cross-Site Scripting
Anti-Malware Security and Brute-Force Firewall <= 4.15.22 - Cross-Site Request Forgery
Anti-Malware Security and Brute-Force Firewall <= 4.15.17 - Cross-Site Scripting
CVE-2022-4327
CVE-2022-2599
WordPress Get Off Malicious Scripts Plugin <= 4.15.17 - Reflected XSS
WordPress Get Off Malicious Scripts Plugin <= 4.15.22 - Stored XSS
WordPress Get Off Malicious Scripts Plugin - Cross Site Scripting
WordPress Get Off Malicious Scripts Plugin - Cross Site Scripting
WordPress Get Off Malicious Scripts Plugin <= 4.15.42 - Multiple Vulnerabilities
CVE-2022-0953
CVE-2021-25101