Known vulnerabilities in Anti-Malware Security and Brute-Force Firewall

This Anti-Malware scanner searches for Malware, Viruses, and other security threats and vulnerabilities on your server and it helps you fix them.

11Reported vulnerabilities

9Highest CVSS score

4.23.90Latest version

100,000+Active installs

What to do now

Update Anti-Malware Security and Brute-Force Firewall to 4.23.90 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 29, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2022-0953	Medium 6.1	3.1%	Before 4.20.96	`4.20.96`	April 25, 2022
CVE-2022-2599	Medium 6.1	1.3%	Before 4.21.83	`4.21.83`	August 29, 2022
CVE-2024-22144	Critical 9	0.9%	4.21.96 and earlier	`4.23.56`	March 12, 2024
CVE-2021-25101	Medium 4.8	0.6%	Before 4.20.94	`4.20.94`	February 21, 2022
CVE-2026-39478	High 7.5	0.5%	4.23.87 and earlier	`4.23.88`	April 20, 2026
CVE-2026-57691	High 7.2	0.2%	4.23.89 and earlier	`4.23.90`	July 9, 2026
CVE-2022-4327	High 7.2	—	4.21.85 and earlier	`4.21.86`	December 21, 2022
WF-d76229c9-39e6-48ab-b038-be40b36aa7bd	High 7.2	—	4.15.17 and earlier	`4.16.18`	May 10, 2016
CVE-2025-11705	Medium 6.5	0.5%	0 to 4.23.81 (inclusive)	`4.23.83`	October 29, 2025
WF-3408bdfd-6337-4c26-b0f2-377375d0e52c	Medium 6.1	—	Before 4.15.23	`4.15.23`	May 25, 2015
WF-14ccd915-a513-45a4-84d3-b2b1fb893f1c	Low 3.1	—	Before 4.15.23	`4.15.23`	May 25, 2015

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.