WordPress Plugin Vulnerabilities

Wordfence 3.8.1 - wp-admin/admin.php whois Parameter Stored XSS

Description

The Wordfence Security – Firewall & Malware Scan WordPress plugin was affected by a wp-admin/admin.php whois Parameter Stored XSS security vulnerability.

Affects Plugins

Plugin icon
wordfence
Fixed in 3.8.3

References

URL
https://packetstormsecurity.com/files/#122993/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
81ae1e9c-016f-4a0e-a5a4-57d5596ea057

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-01-15
Title
WP Smart Editor <= 1.3.3 - Reflected Cross-Site Scripting
Published
2023-02-13
Title
Simple Yearly Archive < 2.1.9 - Admin+ Stored XSS
Published
2024-10-14
Title
Country Flags for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-12-14
Title
Bootstrap Buttons <= 1.2 - Reflected Cross-Site Scripting
Published
2025-11-07
Title
Insert Headers and Footers Code – HT Script < 1.1.7 - Authenticated (Author+) Stored Cross-Site Scripting