← Back

Protect Wp Admin

protect_wp_admin

Vendor: Wp Experts • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-3139
1Wp Experts
1Protect Wp Admin
Jun 17, 2026
Jul 4, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.
CVE-2021-24906
1Wp Experts
1Protect Wp Admin
Jun 17, 2026
Jan 24, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered)...Show more
The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered) via a crafted requestShow less