WordPress Plugin Vulnerabilities

iThemes Security <= 5.3.0 - Insecure Backup/Logfile Generation

Description

The iThemes Security (formerly Better WP Security) WordPress plugin was affected by an Insecure Backup/Logfile Generation security vulnerability.

Affects Plugins

Plugin icon
better-wp-security
Fixed in 5.3.1

References

URL
https://seclists.org/fulldisclosure/2016/Apr/70
URL
https://seclists.org/fulldisclosure/2016/Apr/71

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
99784e81-8085-4da4-a1a4-bd64d9437c55

Timeline

Publicly Published
2016-04-21 (about 9 years ago)
Added
2016-04-22 (about 9 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2019-08-27
Title
WP Private Content Plus < 2.0 - Unauthenticated Options Change
Published
2016-12-08
Title
WooCommerce Email Test 1.5 - Order Information Disclosure
Published
2022-09-26
Title
Drag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass
Published
2021-11-30
Title
LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
Published
2022-11-09
Title
Better Messages < 1.9.10.71 - Subscriber+ Messaging Block Bypass