WordPress Plugin Vulnerabilities

Better WP Security 3.6.3 - Online Backup Storage current_time Function Brute Force Disclosure

Description

The iThemes Security (formerly Better WP Security) WordPress plugin was affected by an Online Backup Storage current_time Function Brute Force Disclosure security vulnerability.

Affects Plugins

Plugin icon
better-wp-security
Fixed in 4.0.0

References

URL
https://packetstormsecurity.com/files/#125219/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
a9098f41-65e3-4435-8d62-478c17c1963b

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-10-23
Title
Reusable Text Blocks <= 1.5.3 - Author+ Stored Cross-Site Scripting via Shortcode
Published
2021-12-20
Title
Profile Extra Fields < 1.2.4 - Reflected Cross-Site Scripting
Published
2023-06-02
Title
Page Builder by AZEXO <= 1.27.133 - Contributor+ Stored Cross-Site Scripting via shortcode
Published
2025-02-18
Title
XV Random Quotes <= 2.6.0 - Settings Reset via CSRF
Published
2025-01-06
Title
WooCommerce Digital Content Delivery (incl. DRM) – FlickRocket < 4.76 - Reflected Cross-Site Scripting