WordPress Htaccess Vulnerabilities

Wordpress Htaccess vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

26 September 2025

Cross-Site Request Forgery Vulnerability in HTACCESS IP Blocker by Taraprasad Swain
CVE-2025-60170
WordPressHtaccess Ip Blocker7.1HIGH

3 March 2025

Cross-Site Scripting Vulnerability in .htaccess Login Block Plugin by NotFound
CVE-2025-27269
WordPress.htaccess Login Block7.1HIGH

15 January 2025

Insertion of Sensitive Information in WPChill Htaccess File Editor
CVE-2025-22773
WordPressHtaccess File Editor5.3MEDIUM

1 November 2024

Incorrect Authorization vulnerability in WPChill Htaccess File Editor Allows Accessing Functionality Not Properly Constrained by ACLs
CVE-2024-49256
WordPressHtaccess File Editor8.8HIGH

30 August 2023

Stored Cross-Site Scripting Vulnerability in WP htaccess Control Plugin
CVE-2023-25462
WordPressWP Htaccess Control5.9MEDIUM

14 December 2021

.htaccess Redirect <= 0.3.1 Reflected Cross-Site Scripting
CVE-2021-38361
WordPress.htaccess Redirect6.1MEDIUM

6 February 2020

CSRF Vulnerability in BestWebSoft Htaccess Plugin for WordPress
CVE-2020-8658
WordpressHtaccess8.8HIGH

23 October 2019

Cross-Site Scripting Vulnerability in Easy Digital Downloads Htaccess Editor for WordPress
CVE-2015-9515
WordpressEasy Digital Downloads6.1MEDIUM

13 August 2019

Multiple XSS Issues in htaccess Plugin for WordPress
CVE-2017-18496
WordpressHtaccess6.1MEDIUM

22 May 2017

Cross-Site Scripting Vulnerability in Multiple WordPress Plugins by BestWebSoft
CVE-2017-2171
WordPressCaptcha6.1MEDIUM