← WordPress Vulnerabilities
WordPress security by component

WP Hardening – Fix Your WordPress Security

WP Hardening provides configuration options for disabling selected WordPress features and tightening site settings.

WP Hardening – Fix Your WordPress Security (wp-hardening) is a WordPress plugin with 3 published CVE records in this archive. The latest tracked vulnerability was published Sep 18, 2024; the highest published CVSS base score is 6.1.

Plugin slug: wp-hardening

CVE-2024-6641: WP Hardening – Fix Your WordPress Security: A security weakness

WP Hardening – Fix Your WordPress Security is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedSep 18, 2024
Safe version guidanceSee mitigation notes
Published vulnerabilities for wp-hardening
Safe version
Sep 18, 2024 CVE-2024-6641
WP Hardening – Fix Your WordPress Security: A security weakness
WP Hardening – Fix Your WordPress Security is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Jun 21, 2021 CVE-2021-24373
WP Hardening – Fix Your WordPress Security: Cross-site scripting
WP Hardening – Fix Your WordPress Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVEPending
NVD6.1
Jun 21, 2021 CVE-2021-24372
WP Hardening – Fix Your WordPress Security: Cross-site scripting
WP Hardening – Fix Your WordPress Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVEPending
NVD6.1