CVE-2026-84776: WordPress MalCare Security plugin <= 6.69 - Denial of Service Attack vulnerability
Published Sep 3, 2026
·Updated
Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions.
Affected Software
1 affected component
WordPress MalCare Security plugin<=6.69
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress MalCare Security pluginto a version that resolves this vulnerability.Fixed in 6.72
Event History
Sep 3, 2026
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker can exploit it; no account or user interaction is required.
2
What is the impact of a successful attack?
The reported impact is denial of service, affecting availability. The supplied severity vector indicates no reported confidentiality or integrity impact.
3
Which installations are affected?
WordPress sites using the MalCare Security plugin version 6.69 or earlier are identified as affected.