WordPress Plugin Vulnerabilities

BulletProof Security <= .53.3 - Multiple XSS Vulnerabilities

Description

The BulletProof Security WordPress plugin was affected by a Multiple XSS Vulnerabilities security vulnerability.

Affects Plugins

Plugin icon
bulletproof-security
Fixed in .53.4

References

URL
https://seclists.org/fulldisclosure/2016/May/31
URL
https://seclists.org/bugtraq/2016/May/47
URL
https://www.netsparker.com/web-applications-advisories/ns-16-003-multiple-xss-vulnerabilities-identified-in-bulletproof-security/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
firefart
Submitter website
https://firefart.at/
Submitter twitter
_FireFart_
Verified
No
WPVDB ID
ff7e9450-84bb-49c6-af99-d1d10e1b0505

Timeline

Publicly Published
2016-05-11 (about 8 years ago)
Added
2016-05-11 (about 8 years ago)
Last Updated
2019-11-01 (about 4 years ago)

Other

Published
Title
Published
2021-05-16
Title
Mediumish <= 1.0.47 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Published
2022-10-17
Title
WP < 6.0.3 - Reflected XSS via SQLi in Media Library
Published
2023-06-28
Title
Layer Slider <= 1.1.9.7 - Contributor+ Stored XSS
Published
2018-02-14
Title
Ultimate Member < 2.0.4 - Multiple XSS
Published
2019-04-09
Title
WP Statistics <= 12.6.3 - Referer Cross-Site Scripting (XSS)