VendorsWordfencewordfence_securityall versions
Vulnerabilities

Wordfence Security

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2014-4932
Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php.
Published 2018-08-28 · Modified
6.1EPSS 0.012
CVE-2022-3144
Wordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Published 2022-09-23 · Modified
4.8EPSS 0.008