AntiVirus
AntiVirus has one disclosed vulnerability in the WordSec catalog, all reported in 2013; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (100%).
The one issue recorded for AntiVirus has a vendor fix available, so running the current release closes it.
All of these findings were reported by Eugene Dokukin. AntiVirus is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
AntiVirus < 1.1 - Full Path Disclosure
Read the full analysisVulnerability Records

AntiVirus
Author
pluginkollektiv
AntiVirus is an easy-to-use, safe tool to harden your WordPress site against exploits, malware and spam injections. You can configure AntiVirus to perform an automated daily scan of your theme files. If the plugin detects any suspicious code injections, it will send out a notification to a previously configured e-mail address. In case your WordPress site has been hacked, AntiVirus will help you to become aware of the problem very quickly in order for you to take immediate action. Features Scan for suspicious code in the theme files (daily scan with email notifications and manual scan) with an option to mark detected cases as false positive Checksum verification for WordPress Core files Optional: Google Safe Browsing for malware and phishing monitoring. A complete documentation is available on the AntiVirus website. Support Community support via the support forums on wordpress.org We don’t handle support via e-mail, Twitter, GitHub issues etc. Contribute Active development of this plugin is handled on GitHub. Pull requests for documented bugs are highly appreciated. If you think you’ve found a bug (e.g. you’re experiencing unexpected behavior), please post at the support forums first. If you want to help us translate this plugin you can do so on WordPress Translate. Credits Author: Sergej Müller Maintainers: pluginkollektiv
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C