WordPress Plugin Vulnerabilities

BulletProof Security - Security Log Script Insertion

Description

The BulletProof Security WordPress plugin was affected by a Security Log Script Insertion security vulnerability.

Affects Plugins

Plugin icon
bulletproof-security
Fixed in .49

References

CVE
CVE-2013-3487

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
47373d3e-a7f6-43cb-8b40-39528405672b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-01-16
Title
REAL WordPress Sidebar <= 0.1 - Unauthenticated Stored Cross-Site Scripting
Published
2023-01-13
Title
Map Multi Marker <= 3.2.1 - Reflected Cross-Site Scripting
Published
2024-07-09
Title
Plugin Notes Plus < 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2024-03-06
Title
User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin < 3.1.5 - Unauthenticated Stored Self-Based Cross-Site Scripting
Published
2025-08-16
Title
Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting