CVE-2014-7958 BulletProof Security < .51.1 - Cross-Site Scripting
MediumCVSS 4.3
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress bulletproof-security(WordPress) | < .51.1 | .51.1 |
| ait-pro bulletproof security | = .44 | No fix listed |
| ait-pro bulletproof security | = .44.1 | No fix listed |
| ait-pro bulletproof security | = .45 | No fix listed |
| ait-pro bulletproof security | = .45.1 | No fix listed |
| ait-pro bulletproof security | = .45.2 | No fix listed |
| ait-pro bulletproof security | = .45.3 | No fix listed |
| ait-pro bulletproof security | = .45.4 | No fix listed |
| ait-pro bulletproof security | = .45.5 | No fix listed |
| ait-pro bulletproof security | = .45.6 | No fix listed |
| ait-pro bulletproof security | = .45.7 | No fix listed |
| ait-pro bulletproof security | = .45.8 | No fix listed |
| ait-pro bulletproof security | = .45.9 | No fix listed |
| ait-pro bulletproof security | = .46 | No fix listed |
| ait-pro bulletproof security | = .46.1 | No fix listed |
| ait-pro bulletproof security | = .46.2 | No fix listed |
| ait-pro bulletproof security | = .46.3 | No fix listed |
| ait-pro bulletproof security | = .46.4 | No fix listed |
| ait-pro bulletproof security | = .46.5 | No fix listed |
| ait-pro bulletproof security | = .46.6 | No fix listed |
| ait-pro bulletproof security | = .46.7 | No fix listed |
| ait-pro bulletproof security | = .46.8 | No fix listed |
| ait-pro bulletproof security | = .46.9 | No fix listed |
| ait-pro bulletproof security | = .47 | No fix listed |
| ait-pro bulletproof security | = .47.1 | No fix listed |
Show 39 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ait-pro bulletproof security | = .47.2 | No fix listed |
| ait-pro bulletproof security | = .47.3 | No fix listed |
| ait-pro bulletproof security | = .47.4 | No fix listed |
| ait-pro bulletproof security | = .47.5 | No fix listed |
| ait-pro bulletproof security | = .47.6 | No fix listed |
| ait-pro bulletproof security | = .47.7 | No fix listed |
| ait-pro bulletproof security | = .47.8 | No fix listed |
| ait-pro bulletproof security | = .47.9 | No fix listed |
| ait-pro bulletproof security | = .48 | No fix listed |
| ait-pro bulletproof security | = .48.1 | No fix listed |
| ait-pro bulletproof security | = .48.2 | No fix listed |
| ait-pro bulletproof security | = .48.3 | No fix listed |
| ait-pro bulletproof security | = .48.4 | No fix listed |
| ait-pro bulletproof security | = .48.5 | No fix listed |
| ait-pro bulletproof security | = .48.6 | No fix listed |
| ait-pro bulletproof security | = .48.7 | No fix listed |
| ait-pro bulletproof security | = .48.8 | No fix listed |
| ait-pro bulletproof security | = .48.9 | No fix listed |
| ait-pro bulletproof security | = .49 | No fix listed |
| ait-pro bulletproof security | = .49.1 | No fix listed |
| ait-pro bulletproof security | = .49.2 | No fix listed |
| ait-pro bulletproof security | = .49.3 | No fix listed |
| ait-pro bulletproof security | = .49.4 | No fix listed |
| ait-pro bulletproof security | = .49.5 | No fix listed |
| ait-pro bulletproof security | = .49.6 | No fix listed |
| ait-pro bulletproof security | = .49.7 | No fix listed |
| ait-pro bulletproof security | = .49.8 | No fix listed |
| ait-pro bulletproof security | = .49.9 | No fix listed |
| ait-pro bulletproof security | = .50 | No fix listed |
| ait-pro bulletproof security | = .50.1 | No fix listed |
| ait-pro bulletproof security | = .50.2 | No fix listed |
| ait-pro bulletproof security | = .50.3 | No fix listed |
| ait-pro bulletproof security | = .50.4 | No fix listed |
| ait-pro bulletproof security | = .50.5 | No fix listed |
| ait-pro bulletproof security | = .50.6 | No fix listed |
| ait-pro bulletproof security | = .50.7 | No fix listed |
| ait-pro bulletproof security | = .50.8 | No fix listed |
| ait-pro bulletproof security | = .50.9 | No fix listed |
| ait-pro bulletproof security | = .51 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20141105 Wordpress bulletproof-security <=.51 multiple vulnerabilities mailing-list third-party-advisory vdb-entry
- 70916 third-party-advisory vdb-entry
- wordpress.org patch vendor-advisory