CVE-2014-4664

Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...

CVE-2014-4664: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...

WordPress Wordfence Firewall 5.1.2 Cross Site Scripting Vulnerability

WordPress Wordfence Firewall plugin version 5.1.2 suffers from a cross site scripting vulnerability. Product: Wordfence Firewall Plugin For Wordpress Vendor: Wordfence Vulnerable Versions: 5.1.2 Tested Version: 5.1.2 Advisory Publication: June 30, 2014 without technical details Vendor Notificatio...

Wordfence <= 5.2.4 - Multiple Vulnerabilities (XSS & Bypasses)

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Multiple Vulnerabilities XSS & Bypasses security vulnerability...

Wordfence 5.2.3 - Multiple Vulnerabilities

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Wordfence 5.2.3 - Banned IP Functionality Bypass

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Banned IP Functionality Bypass security vulnerability...

Wordfence 5.2.4 - IPTraf.php URI Request Stored XSS

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by an IPTraf.php URI Request Stored XSS security vulnerability...

Wordfence 5.2.4 - Unspecified Issue

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by an Unspecified Issue security vulnerability...

WordPress Wordfence Security Plugin - Multiple Vulnerabilities

WordPress Wordfence Security plugin is prone to multiple HTML injection and security bypass vulnerabilities. These issues allow HTML and script code run in the context of the affected browser. In this way an attacker can steal cookie-based authentication credentials or control how the site is...

WordPress Plugin Wordfence Security - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/69815/info The Wordfence Security Plugin for WordPress is prone to following vulnerabilities: 1. Multiple HTML-Injection vulnerabilities 2. Multiple Security Bypass vulnerabilities Successful exploits of these issues allow the attacker-supplied HTML and...

WordPress Plugin Wordfence Security - Multiple Vulnerabilities

WordPress Plugin Wordfence Security - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/69815/info The Wordfence Security Plugin for WordPress is prone to following vulnerabilities: 1. Multiple HTML-Injection vulnerabilities 2. Multiple Security Bypass vulnerabilities Successful...

Wordfence 3.8.1 - wp-admin/admin.php whois Parameter Stored XSS

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a wp-admin/admin.php whois Parameter Stored XSS security vulnerability...

Wordfence 3.3.5 - XSS & IAA

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a XSS & IAA security vulnerability...

Wordfence 3.8.6 - lib/IPTraf.php User-Agent Header Stored XSS

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a lib/IPTraf.php User-Agent Header Stored XSS security vulnerability...

Wordfence 3.8.1 - Password Creation Restriction Bypass

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Password Creation Restriction Bypass security vulnerability...

WordPress Wordfence Security Plugin <= 5.1.3 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "whoisval" parameter on the WordfenceWhois page to wp-admin/admin.php. Solution Update the plugin...

WordPress Wordfence 3.8.1 Cross Site Scripting

Exploit Title: Wordpress Plugin Wordfence 3.8.1 - Cross Site Scripting Date: 28 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.wordfence.com/ Tested on: Win8 & Linux Mint Affected Version : 3.8.1 & Anteriores. Contacts:...

Wordfence Plugin for WordPress 'email' Parameter XSS

The version of the Wordfence plugin for WordPress installed on the remote host fails to properly sanitize user-supplied input to the 'email' parameter in the lib/wordfenceClass.php script. An unauthenticated, remote attacker can exploit this issue, via a specially crafted request, to execute...

XSS and IAA vulnerabilities in Wordfence Security for WordPress

Hello 3APA3A! I want to warn you about Cross-Site Scripting and Insufficient Anti-automation vulnerabilities in Wordfence Security for WordPress. Wordfence - it's security plugin for WordPress. ------------------------- Affected products: ------------------------- Vulnerable are Wordfence Securit...

WordPress Wordfence Security 3.3.5 Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting and Insufficient Anti-automation vulnerabilities in Wordfence Security for WordPress. Wordfence - it's security plugin for WordPress. ------------------------- Affected products: ------------------------- Vulnerable are Wordfence Security...