708 matches found
Wordfence <= 5.1.4 - Cross-Site Scripting (XSS)
An attacker can inject arbitrary script via the vulnerable query string parameter val of the whois.php file...
Wordfence 5.2.2 - XSS in Referer Header
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a XSS in Referer Header security vulnerability...
WordPress Wordfence Firewall 5.1.2 Cross Site Scripting
WordPress Wordfence Firewall plugin version 5.1.2 suffers from a cross site scripting vulnerability. =============================================== Product: Wordfence Firewall Plugin For Wordpress Vendor: Wordfence Vulnerable Versions: 5.1.2 Tested Version: 5.1.2 Advisory Publication: June 30,...
CVE-2014-4664
Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...
CVE-2014-4664
Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...
CVE-2014-4664
The CVE affects Wordfence Security/Firewall Plugin for WordPress (WordfenceWhois page) where the whoisval parameter in wp-admin/admin.php is not properly sanitized, allowing a reflected XSS. Root cause: insufficient input sanitization of the whoisval GET parameter. Impact: an attacker can craft a...
WordPress Wordfence Firewall 5.1.2 Cross Site Scripting Vulnerability
WordPress Wordfence Firewall plugin version 5.1.2 suffers from a cross site scripting vulnerability. Product: Wordfence Firewall Plugin For Wordpress Vendor: Wordfence Vulnerable Versions: 5.1.2 Tested Version: 5.1.2 Advisory Publication: June 30, 2014 without technical details Vendor Notificatio...
Wordfence <= 5.2.4 - Multiple Vulnerabilities (XSS & Bypasses)
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Multiple Vulnerabilities XSS & Bypasses security vulnerability...
Wordfence 5.2.3 - Multiple Vulnerabilities
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
Wordfence 5.2.3 - Banned IP Functionality Bypass
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Banned IP Functionality Bypass security vulnerability...
Wordfence 5.2.4 - IPTraf.php URI Request Stored XSS
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by an IPTraf.php URI Request Stored XSS security vulnerability...
Wordfence 5.2.4 - Unspecified Issue
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by an Unspecified Issue security vulnerability...
WordPress Wordfence Security Plugin - Multiple Vulnerabilities
WordPress Wordfence Security plugin is prone to multiple HTML injection and security bypass vulnerabilities. These issues allow HTML and script code run in the context of the affected browser. In this way an attacker can steal cookie-based authentication credentials or control how the site is...
WordPress Plugin Wordfence Security - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/69815/info The Wordfence Security Plugin for WordPress is prone to following vulnerabilities: 1. Multiple HTML-Injection vulnerabilities 2. Multiple Security Bypass vulnerabilities Successful exploits of these issues allow the attacker-supplied HTML and...
WordPress Plugin Wordfence Security - Multiple Vulnerabilities
WordPress Plugin Wordfence Security - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/69815/info The Wordfence Security Plugin for WordPress is prone to following vulnerabilities: 1. Multiple HTML-Injection vulnerabilities 2. Multiple Security Bypass vulnerabilities Successful...
Wordfence 3.8.1 - wp-admin/admin.php whois Parameter Stored XSS
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a wp-admin/admin.php whois Parameter Stored XSS security vulnerability...
Wordfence 3.3.5 - XSS & IAA
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a XSS & IAA security vulnerability...
Wordfence 3.8.6 - lib/IPTraf.php User-Agent Header Stored XSS
The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a lib/IPTraf.php User-Agent Header Stored XSS security vulnerability...