CVE-2022-1265

CVE-2022-1265 affects the BulletProof Security WordPress plugin prior to 6.1. The vulnerability arises from insufficient sanitization/escaping of CAPTCHA settings, allowing high-privileged (Admin+) users to perform stored XSS even when unfiltered_html is disallowed. Impact is client-side JavaScri...

CVE-2022-0590

CVE-2022-0590 affects the BulletProof Security WordPress plugin (before 5.8). The issue arises from the plugin not sanitising and escaping certain settings, enabling high-privilege admins to perform stored XSS even when unfiltered_html is disallowed. The Red Hat/RedHat-related advisory and multip...