CVE Database /
CVE-2019-9669
CVE · Medium
CVE-2019-9669 — Wordfence Security – Firewall, Malware Scan, and Login Security [wordfence] <= 7.2.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-9669
|
Wordfence Security – Firewall, Malware Scan, and Login Security [wordfence] <= 7.2.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 7.2.3
|
7.2.3 |
2019-04-25 |
—
|
CVE-2019-9669
The Wordfence plugin through version 7.2.3 contained a cross-site scripting vulnerability accessible through a specific attack method. The vendor disputed the validity of this classification, arguing that the firewall rules are managed on external servers rather than within the plugin itself, and therefore circumventing WAF rules should not be considered a software vulnerability of the WordPress plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings