WordPress Plugin Vulnerabilities

Better WP Security 3.5.5 - inc/admin/content.php id_specialfile Parameter Stored XSS

Description

The iThemes Security (formerly Better WP Security) WordPress plugin was affected by an inc/admin/content.php id_specialfile Parameter Stored XSS security vulnerability.

Affects Plugins

Plugin icon
better-wp-security
Fixed in 3.5.6

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
84e3b0f1-534b-4504-b66a-d46211f66d11

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-06-25
Title
web-cam < 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter
Published
2024-05-22
Title
Arforms < 6.4.1 - Reflected XSS
Published
2024-06-22
Title
User Submitted Posts < 20240516 - Admin+ Stored XSS
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Published
2024-05-07
Title
Link Library < 7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode