CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2014-4932 | Wordfence Security – Firewall, Malware Scan, and Login Security [wordfence] < 5.1.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 5.1.5 | 5.1.5 | 2014-12-08 | — |
The Wordfence Security plugin prior to version 5.1.5 contains a cross-site scripting vulnerability in the whois.php file where the val parameter fails to properly sanitize user input, allowing attackers to inject malicious scripts or HTML code into the application.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.