Security@* Security Vulnerabilities and Issues — Security@* CVE List

Lucene search

IthemesSecurity*

2 matches found

CVE•added 2018/06/22 4:29 p.m.•42 views

CVE-2018-12636

The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.

7.2CVSS7.4AI score0.48401EPSS

CVE•added 2018/03/02 8:29 p.m.•34 views

CVE-2018-7433

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

7.5CVSS7.5AI score0.00614EPSS