CVE-2025-11705

CVE-2025-11705 is a medium severity vulnerability affecting the affected product.

Description: The Anti-Malware Security and Brute-Force Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.23.81 due to a missing capability check combined with an information exposure in several GOTMLS_* AJAX actions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents […]

Affected Versions:
❌ Vulnerable: ≤ 4.23.81
✅ Safe: ≥ 4.23.82

Exploit Difficulty: EASY
⏱️ Time to exploit: < 1 hour
🛠️ Required skills: Basic web security knowledge
💰 Public exploits: Likely available

How to Fix:


- Check if you're running the affected product
- Verify version (vulnerable: ≤ 4.23.81)


- Update to ≥ 4.23.82 or later
- If patching is not immediately possible: restrict network exposure, apply least-privilege access


- Test the fix in a staging environment first
- Review logs for signs of exploitation
- Monitor for IOCs (Indicators of Compromise)


- Enable automatic security updates
- Set up vulnerability monitoring
- Review and harden security configurations