Virusdie vulnerabilities
Published CVEs affecting Virusdie products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-14864
Medium · 4.3
CWE-862 Feb 19, 2026
Virusdie <= 1.1.7 - Missing Authorization to Authenticated (Subscriber+) API Key Disclosure
The Virusdie - One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the `vd_get_apikey` function which is hooked to `wp_ajax_virusdie_apikey`. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve the site's Virusdie API key, which could be used to access the site owner's Virusdie account and potentially compromise site security.
CVE-2025-68577
Medium · 4.3
CWE-862 Dec 24, 2025
WordPress Virusdie plugin <= 1.1.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Virusdie Virusdie virusdie allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Virusdie: from n/a through <= 1.1.6.
CVE-2025-68576
Medium · 4.3
CWE-497 Dec 24, 2025
WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Virusdie Virusdie virusdie allows Retrieve Embedded Sensitive Data.This issue affects Virusdie: from n/a through <= 1.1.6.