Lucene search
HistoryNov 06, 2014 - 3:55 p.m.
CVE-2014-7958
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.1%
Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.
Affected configurations
Node
ait-probulletproof_securityMatch.44wordpress
ORait-probulletproof_securityMatch.44.1wordpress
ORait-probulletproof_securityMatch.45wordpress
ORait-probulletproof_securityMatch.45.1wordpress
ORait-probulletproof_securityMatch.45.2wordpress
ORait-probulletproof_securityMatch.45.3wordpress
ORait-probulletproof_securityMatch.45.4wordpress
ORait-probulletproof_securityMatch.45.5wordpress
ORait-probulletproof_securityMatch.45.6wordpress
ORait-probulletproof_securityMatch.45.7wordpress
ORait-probulletproof_securityMatch.45.8wordpress
ORait-probulletproof_securityMatch.45.9wordpress
ORait-probulletproof_securityMatch.46wordpress
ORait-probulletproof_securityMatch.46.1wordpress
ORait-probulletproof_securityMatch.46.2wordpress
ORait-probulletproof_securityMatch.46.3wordpress
ORait-probulletproof_securityMatch.46.4wordpress
ORait-probulletproof_securityMatch.46.5wordpress
ORait-probulletproof_securityMatch.46.6wordpress
ORait-probulletproof_securityMatch.46.7wordpress
ORait-probulletproof_securityMatch.46.8wordpress
ORait-probulletproof_securityMatch.46.9wordpress
ORait-probulletproof_securityMatch.47wordpress
ORait-probulletproof_securityMatch.47.1wordpress
ORait-probulletproof_securityMatch.47.2wordpress
ORait-probulletproof_securityMatch.47.3wordpress
ORait-probulletproof_securityMatch.47.4wordpress
ORait-probulletproof_securityMatch.47.5wordpress
ORait-probulletproof_securityMatch.47.6wordpress
ORait-probulletproof_securityMatch.47.7wordpress
ORait-probulletproof_securityMatch.47.8wordpress
ORait-probulletproof_securityMatch.47.9wordpress
ORait-probulletproof_securityMatch.48wordpress
ORait-probulletproof_securityMatch.48.1wordpress
ORait-probulletproof_securityMatch.48.2wordpress
ORait-probulletproof_securityMatch.48.3wordpress
ORait-probulletproof_securityMatch.48.4wordpress
ORait-probulletproof_securityMatch.48.5wordpress
ORait-probulletproof_securityMatch.48.6wordpress
ORait-probulletproof_securityMatch.48.7wordpress
ORait-probulletproof_securityMatch.48.8wordpress
ORait-probulletproof_securityMatch.48.9wordpress
ORait-probulletproof_securityMatch.49wordpress
ORait-probulletproof_securityMatch.49.1wordpress
ORait-probulletproof_securityMatch.49.2wordpress
ORait-probulletproof_securityMatch.49.3wordpress
ORait-probulletproof_securityMatch.49.4wordpress
ORait-probulletproof_securityMatch.49.5wordpress
ORait-probulletproof_securityMatch.49.6wordpress
ORait-probulletproof_securityMatch.49.7wordpress
ORait-probulletproof_securityMatch.49.8wordpress
ORait-probulletproof_securityMatch.49.9wordpress
ORait-probulletproof_securityMatch.50wordpress
ORait-probulletproof_securityMatch.50.1wordpress
ORait-probulletproof_securityMatch.50.2wordpress
ORait-probulletproof_securityMatch.50.3wordpress
ORait-probulletproof_securityMatch.50.4wordpress
ORait-probulletproof_securityMatch.50.5wordpress
ORait-probulletproof_securityMatch.50.6wordpress
ORait-probulletproof_securityMatch.50.7wordpress
ORait-probulletproof_securityMatch.50.8wordpress
ORait-probulletproof_securityMatch.50.9wordpress
ORait-probulletproof_securityMatch.51wordpress
Related
cvelist
cvelist
CVE-2014-7958
2014-11-06 15:00:00
cve
cve
CVE-2014-7958
2014-11-06 15:55:08
patchstack
patchstack
WordPress BulletProof Security Plugin <= .51 - XSS
2014-10-07 00:00:00
prion
prion
Cross site scripting
2014-11-06 15:55:00
zdt
zdt
WordPress Bulletproof-Security .51 Multiple Vulnerabilities
2014-11-06 00:00:00
wpvulndb
wpvulndb
BulletProof Security <= .51 - Multiple Vulnerabilities (XSS & SSRF)
2014-11-05 00:00:00
securityvulns
securityvulns
Wordpress bulletproof-security <=.51 multiple vulnerabilities
2014-12-01 00:00:00
packetstorm
packetstorm
WordPress Bulletproof-Security .51 XSS / SQL Injection / SSRF
2014-11-05 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.1%
Related for NVD:CVE-2014-7958