Kadence Security – Password, Two Factor Authentication, and Brute Force Protection

WordPress plugin · better-wp-security · WordPress.org ↗

Latest v10.0.4 Last release Sep 16, 2026 Tested up to WP 7.1.1 700,000+ active installs

Critical

High

Known total

Unfixed

Running Kadence Security – Password, Two Factor Authentication, and Brute Force Protection on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 7.7.0 WPVulnerability	< 7.7.0	v7.7.0	CVE-2020-36176	Jan 6, 2021
HIGH CVSS 7.2	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 7.0.3 WPVulnerability	< 7.0.3	v7.0.3	CVE-2018-12636	Jun 22, 2018
HIGH CVSS 7.5	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 6.9.1 WPVulnerability	< 6.9.1	v6.9.1	CVE-2018-7433	Mar 2, 2018
LOW CVSS 3.7	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 9.3.2 WPVulnerability	< 9.3.2	v9.3.2	CVE-2022-44593	Jun 20, 2024
LOW CVSS 3.7	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 8.1.5 WPVulnerability	< 8.1.5	v8.1.5	CVE-2023-28786	Mar 27, 2023
NONE CVSS 0.0	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.2.5 WPVulnerability	< 3.2.5	v3.2.5	CVE-2012-4263	May 11, 2012
NONE CVSS 0.0	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.2.5 WPVulnerability	< 3.2.5	v3.2.5	CVE-2012-4264	May 11, 2012
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 9.0.1 WPVulnerability	< 9.0.1	v9.0.1	—	Nov 1, 2023
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 9.0.1 WPVulnerability	< 9.0.1	v9.0.1	—	Oct 31, 2023
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 7.9.1 WPVulnerability	< 7.9.1	v7.9.1	—	Apr 22, 2021
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 7.9.1 WPVulnerability	< 7.9.1	v7.9.1	—	Apr 21, 2021
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.6.2 WPVulnerability	< 5.6.2	v5.6.2	—	Oct 6, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.6.2 WPVulnerability	< 5.6.2	v5.6.2	—	Oct 6, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.6.2 WPVulnerability	< 5.6.2	v5.6.2	—	Sep 27, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.6 WPVulnerability	< 5.3.6	v5.3.6	—	Apr 25, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.6 WPVulnerability	< 5.3.6	v5.3.6	—	Apr 25, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.1 WPVulnerability	< 5.3.1	v5.3.1	—	Apr 22, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.1 WPVulnerability	< 5.3.1	v5.3.1	—	Apr 21, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.5 WPVulnerability	< 5.3.5	v5.3.5	—	Apr 5, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.5 WPVulnerability	< 5.3.5	v5.3.5	—	Apr 5, 2016
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 4.6.13 WPVulnerability	< 4.6.13	v4.6.13	—	Oct 18, 2015
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.5.6 WPVulnerability	< 3.5.6	v3.5.6	—	May 15, 2015
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.4.4 WPVulnerability	< 3.4.4	v3.4.4	—	May 15, 2015
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.6.4 WPVulnerability	< 3.6.4	v3.6.4	—	May 15, 2015
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 4.0.0 WPVulnerability	< 4.0.0	v4.0.0	—	May 15, 2015
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 4.6.13 WPVulnerability	< 4.6.13	v4.6.13	—	Apr 14, 2015
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.6.4 WPVulnerability	< 3.6.4	v3.6.4	—	Aug 1, 2014
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.6.4 WPVulnerability	< 3.6.4	v3.6.4	—	Aug 1, 2014
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.5.4 WPVulnerability	< 3.5.4	v3.5.4	—	Aug 1, 2014
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.5.4 WPVulnerability	< 3.5.4	v3.5.4	—	Aug 2, 2013
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.4.4 WPVulnerability	< 3.4.4	v3.4.4	—	Aug 20, 2012
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.1 WPVulnerability	< 5.3.1	v5.3.1	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.4.4 WPVulnerability	< 3.4.4	v3.4.4	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 9.0.1 WPVulnerability	< 9.0.1	v9.0.1	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.5 WPVulnerability	< 5.3.5	v5.3.5	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 4.6.13 WPVulnerability	< 4.6.13	v4.6.13	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.3.6 WPVulnerability	< 5.3.6	v5.3.6	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.5.4 WPVulnerability	< 3.5.4	v3.5.4	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 7.9.1 WPVulnerability	< 7.9.1	v7.9.1	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 5.6.2 WPVulnerability	< 5.6.2	v5.6.2	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 4.0.0 WPVulnerability	< 4.0.0	v4.0.0	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.6.4 WPVulnerability	< 3.6.4	v3.6.4	—	—
UNKNOWN	Kadence Security – Password, Two Factor Authentication, and Brute Force Protection [better-wp-security] < 3.5.6 WPVulnerability	< 3.5.6	v3.5.6	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.