Medium 6.1
2026-05-01< 5.4.0
CVE-2024-13362
Minimum safe version
5.4.0
Update to 5.4.0 or later to address 8 fixable vulnerabilities
CVE-2024-13362
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress WP fail2ban Plugin < 5.1.1 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
WordPress WP fail2ban plugin < 4.4.0.3 - Sensitive Information Disclosure vulnerability
WordPress WP fail2ban plugin < 4.4.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability