CVE-2014-4932

MEDIUM 6.1 CVSS 3.0

Published: August 28, 2018
Last modified: June 17, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-79
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php.

Affected products and versions

n/a n/a — Versions not specified
wordfence wordfence_security — Before 5.1.5

References

techdefencelabs.com http://techdefencelabs.com/security-advisories.html Third Party Advisory
www.wordfence.com https://www.wordfence.com/help/advanced/changelog/ Release Notes, Vendor Advisory
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References