plugin

Ethpress Vulnerabilities

2 known security issues reported for the Ethpress WordPress plugin. Most recent disclosed Sep 23, 2026.

1 high 1 medium

Running Ethpress on your site? Check whether your installed version is affected.

Scan your site free

EthPress <= 2.3.5 - Unauthenticated Authentication Bypass

high

The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.5. This is due to the verify_login() function in app/Login.php containing a missing return statement in the signature verification failure branch — when Signature::verify2() reports a mismatch...

CVSS:
8.1
(Wordfence)
Affected:
up to 2.3.5
Fixed in:
2.3.6
Disclosed:
Sep 23, 2026

CVE-2026-19125 on NVD →

Freemius SDK <= 2.4.2 - Missing Authorization Checks

medium

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. An...

CVSS:
6.3
(Wordfence)
Affected:
up to 1.5.1
Fixed in:
1.5.1
Disclosed:
Mar 4, 2022

CVE-2022-4974 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database