WordPress Wordfence Plugin <= 5.2.3 - Bypass

This plugin is prone to banned IP functionality bypass vulnerability. Unlogged requests won't trigger automatic throttling and banning. Solution Update plugin...

WordPress Wordfence Plugin <= 3.8.1 - Bypass

This plugin is prone to a password creation restriction bypass vulnerability. Solution Update plugin...

WordPress Wordfence Plugin <= 5.2.4 - Stored XSS

This plugin is prone to IPTraf.php URI request stored cross site scripting vulnerability. Solution Update plugin...

WordPress Wordfence Plugin <= 5.2.4 - Unspecified Vulnerability

This plugin is prone to an unspecified issue. Solution Update plugin...

WordPress Wordfence Plugin <= 5.2.2 - Cross Site Scripting

This plugin is prone to cross site scripting in referer header. Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

WordPress Wordfence Plugin <= 3.8.1 - Stored XSS

This plugin is prone to wp-admin/admin.php whois parameter stored cross site scripting vulnerability. Solution Update plugin...

WordPress Wordfence Plugin <= 3.8.6 - Stored XSS

This plugin is prone to lib/IPTraf.php User-Agent header stored cross site scripting vulnerability. Solution Update plugin...

WordPress Wordfence Plugin <= 3.3.5 - Multiple Vulnerabilities

This plugin is prone to "email" cross site scripting and insufficient anti-automation vulnerabilities. Solution Update plugin...

WordPress Wordfence Plugin <= 5.2.3 - Multiple Vulnerabilities

This plugin is prone to stored XSS, insufficient logging, throttle bypass and exploit detection bypass vulnerabilities. Solution Update plugin...

Wordfence <= 5.1.4 - Cross-Site Scripting (XSS)

An attacker can inject arbitrary script via the vulnerable query string parameter val of the whois.php file...

Wordfence 5.2.2 - XSS in Referer Header

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a XSS in Referer Header security vulnerability...

WordPress Wordfence Firewall 5.1.2 Cross Site Scripting

WordPress Wordfence Firewall plugin version 5.1.2 suffers from a cross site scripting vulnerability. =============================================== Product: Wordfence Firewall Plugin For Wordpress Vendor: Wordfence Vulnerable Versions: 5.1.2 Tested Version: 5.1.2 Advisory Publication: June 30,...

CVE-2014-4664

Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...

CVE-2014-4664

The CVE affects Wordfence Security/Firewall Plugin for WordPress (WordfenceWhois page) where the whoisval parameter in wp-admin/admin.php is not properly sanitized, allowing a reflected XSS. Root cause: insufficient input sanitization of the whoisval GET parameter. Impact: an attacker can craft a...

CVE-2014-4664

Cross-site scripting XSS vulnerability in the Wordfence Security plugin before 5.1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the whoisval parameter on the WordfenceWhois page to wp-admin/admin.php...

WordPress Wordfence Firewall 5.1.2 Cross Site Scripting Vulnerability

WordPress Wordfence Firewall plugin version 5.1.2 suffers from a cross site scripting vulnerability. Product: Wordfence Firewall Plugin For Wordpress Vendor: Wordfence Vulnerable Versions: 5.1.2 Tested Version: 5.1.2 Advisory Publication: June 30, 2014 without technical details Vendor Notificatio...

Wordfence <= 5.2.4 - Multiple Vulnerabilities (XSS & Bypasses)

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Multiple Vulnerabilities XSS & Bypasses security vulnerability...

Wordfence 5.2.3 - Multiple Vulnerabilities

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Wordfence 5.2.3 - Banned IP Functionality Bypass

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a Banned IP Functionality Bypass security vulnerability...