s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

WORDFENCE-93f9862f-745f-44d5-ac49-f8d2d19b35ed medium

📛 Threat Title

Wordfence Security - Firewall & Malware Scan <= 3.3.6 - Stored Cross-Site Scripting

Category: wordpress-vulnerability Published: Source updated: First seen: Last updated: Source: Wordfence

Description

WordPress plugin Wordfence versions 3.3.6 and older were vulnerable to Cross-Site Scripting via the unlockEmail functionality. Affected software — plugin: Wordfence Security – Firewall, Malware Scan, and Login Security (affected: *-3.3.6). CVSS 6.5 (Medium) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (2)

Remediations (1)

  • Wordfence remediation: Wordfence Security – Firewall, Malware Scan, and Login Security
    Wordfence

    Update to version 3.3.7, or a newer patched version

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.