Multiple iThemes plugins, themes and add-ons - XSS via add_query_arg() and remove_query_arg()

...

iThemes Security 3.0-4.6.12 – Stored Cross-Site Scripting (XSS)

The iThemes Security formerly Better WP Security WordPress plugin was affected by security vulnerability...

Better WP Security <= 3.5.3 - inc/secure.php logevent Function URL H&ling Stored XSS

The iThemes Security formerly Better WP Security WordPress plugin was affected by an inc/secure.php logevent Function URL H Stored XSS security vulnerability...

Better WP Security 3.5.5 - inc/admin/content.php id_specialfile Parameter Stored XSS

The iThemes Security formerly Better WP Security WordPress plugin was affected by an inc/admin/content.php idspecialfile Parameter Stored XSS security vulnerability...

Better WP Security 3.6.3 - /wp-admin/admin-ajax.php license Parameter Stored XSS Weakness

The iThemes Security formerly Better WP Security WordPress plugin was affected by a /wp-admin/admin-ajax.php license Parameter Stored XSS Weakness security vulnerability...

Better WP Security 3.6.3 - Online Backup Storage current_time Function Brute Force Disclosure

The iThemes Security formerly Better WP Security WordPress plugin was affected by an Online Backup Storage currenttime Function Brute Force Disclosure security vulnerability...

Better WP Security 3.4.3 - Multiple XSS

The iThemes Security formerly Better WP Security WordPress plugin was affected by a Multiple XSS security vulnerability...

Better WP Security <= 3.2.4 - Cross-Site Scripting (XSS)

The iThemes Security formerly Better WP Security WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...