Wordfence Security Security Vulnerabilities and Issues — Wordfence Security CVE List

Lucene search

WordfenceWordfence Security

2 matches found

CVE•added 2022/09/23 2:15 p.m.•55 views

CVE-2022-3144

The Wordfence Security – Firewall & Malware Scan plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 7.6.0 via a setting on the options page due to insufficient escaping on the stored value. This makes it possible for authenticated users, with administr...

4.8CVSS4.5AI score0.00163EPSS

CVE•added 2018/08/28 5:29 p.m.•48 views

CVE-2014-4932

Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php.

6.1CVSS6.1AI score0.00269EPSS