EchBay Admin Security
EchBay Admin Security has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for EchBay Admin Security has a vendor fix available, so running the current release closes it.
All of these findings were reported by Jonas Benjamin Friedli. EchBay Admin Security is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-11885EchBay Admin Security <= 1.3.0 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
EchBay Admin Security
Author
Dao Quoc Dai
If you run a WordPress website, you should absolutely use echbay-admin-security to secure it against hackers. Protect WP-Admin fixes a glaring security hole in the WordPress community: the well-known problem of the admin panel URL. Everyone knows where the admin panel, and this includes hackers as well. Protect WP-Admin helps solve this problem by allowing webmasters to setup PIN number or password for login page. The plugin also comes with some access filters, allowing webmasters to restrict guest and registered users access to wp-admin, just in case you want some of your editors to log in the classic way. Thanks for donate
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C