CVE-2021-47977: Gotmls Malware Security And Bruteforce Firewall

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the file parameter. Attackers can send requests to the duplicator_download action via admin-ajax.php with path traversal sequences to access sensitive system files outside the intended directory.

Affected products

• Gotmls Malware Security And Bruteforce Firewall: up to and including 4.20.72

Published 2026-05-16. Last modified 2026-06-17.