4.3
CVE-2012-4264
- EPSS 1.65%
- Veröffentlicht 13.08.2012 22:55:01
- Zuletzt bearbeitet 16.06.2026 23:44:44
- Erkennungen
LoginBetter WP Security <= 3.2.4 - Multiple Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263.
Mögliche Gegenmaßnahme
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection: Update to version 3.2.5, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bit51 ≫ Better-wp-security Version <= 3.2.4
Bit51 ≫ Better-wp-security Version - Update alpha1
Bit51 ≫ Better-wp-security Version - Update alpha10
Bit51 ≫ Better-wp-security Version - Update alpha11
Bit51 ≫ Better-wp-security Version - Update alpha2
Bit51 ≫ Better-wp-security Version - Update alpha3
Bit51 ≫ Better-wp-security Version - Update alpha4
Bit51 ≫ Better-wp-security Version - Update alpha5
Bit51 ≫ Better-wp-security Version - Update alpha6
Bit51 ≫ Better-wp-security Version - Update alpha7
Bit51 ≫ Better-wp-security Version - Update alpha8
Bit51 ≫ Better-wp-security Version - Update alpha9
Bit51 ≫ Better-wp-security Version 0.1 Update alpha
Bit51 ≫ Better-wp-security Version 0.1 Update beta
Bit51 ≫ Better-wp-security Version 0.2 Update beta
Bit51 ≫ Better-wp-security Version 0.3 Update beta
Bit51 ≫ Better-wp-security Version 0.4 Update beta
Bit51 ≫ Better-wp-security Version 0.5 Update beta
Bit51 ≫ Better-wp-security Version 0.6 Update beta
Bit51 ≫ Better-wp-security Version 0.7 Update beta
Bit51 ≫ Better-wp-security Version 0.8 Update beta
Bit51 ≫ Better-wp-security Version 0.9 Update beta
Bit51 ≫ Better-wp-security Version 0.10 Update beta
Bit51 ≫ Better-wp-security Version 0.11 Update beta
Bit51 ≫ Better-wp-security Version 0.13 Update beta
Bit51 ≫ Better-wp-security Version 0.14 Update beta
Bit51 ≫ Better-wp-security Version 0.15 Update beta
Bit51 ≫ Better-wp-security Version 0.16 Update beta
Bit51 ≫ Better-wp-security Version 1.0
Bit51 ≫ Better-wp-security Version 1.1
Bit51 ≫ Better-wp-security Version 1.2
Bit51 ≫ Better-wp-security Version 1.3
Bit51 ≫ Better-wp-security Version 1.4
Bit51 ≫ Better-wp-security Version 1.5
Bit51 ≫ Better-wp-security Version 1.6
Bit51 ≫ Better-wp-security Version 1.7
Bit51 ≫ Better-wp-security Version 1.8
Bit51 ≫ Better-wp-security Version 1.8.1
Bit51 ≫ Better-wp-security Version 1.9
Bit51 ≫ Better-wp-security Version 2.0
Bit51 ≫ Better-wp-security Version 2.1
Bit51 ≫ Better-wp-security Version 2.2
Bit51 ≫ Better-wp-security Version 2.3
Bit51 ≫ Better-wp-security Version 2.4
Bit51 ≫ Better-wp-security Version 2.5
Bit51 ≫ Better-wp-security Version 2.6
Bit51 ≫ Better-wp-security Version 2.7
Bit51 ≫ Better-wp-security Version 2.8
Bit51 ≫ Better-wp-security Version 2.9
Bit51 ≫ Better-wp-security Version 2.10
Bit51 ≫ Better-wp-security Version 2.11
Bit51 ≫ Better-wp-security Version 2.12
Bit51 ≫ Better-wp-security Version 2.13
Bit51 ≫ Better-wp-security Version 2.14
Bit51 ≫ Better-wp-security Version 2.15
Bit51 ≫ Better-wp-security Version 2.16
Bit51 ≫ Better-wp-security Version 2.17
Bit51 ≫ Better-wp-security Version 2.18
Bit51 ≫ Better-wp-security Version 3.0
Bit51 ≫ Better-wp-security Version 3.0.1
Bit51 ≫ Better-wp-security Version 3.0.2
Bit51 ≫ Better-wp-security Version 3.0.3
Bit51 ≫ Better-wp-security Version 3.0.4
Bit51 ≫ Better-wp-security Version 3.0.5
Bit51 ≫ Better-wp-security Version 3.0.6
Bit51 ≫ Better-wp-security Version 3.0.7
Bit51 ≫ Better-wp-security Version 3.0.8
Bit51 ≫ Better-wp-security Version 3.0.9
Bit51 ≫ Better-wp-security Version 3.0.10
Bit51 ≫ Better-wp-security Version 3.0.11
Bit51 ≫ Better-wp-security Version 3.0.12
Bit51 ≫ Better-wp-security Version 3.1
Bit51 ≫ Better-wp-security Version 3.2
Bit51 ≫ Better-wp-security Version 3.2.1
Bit51 ≫ Better-wp-security Version 3.2.2
Bit51 ≫ Better-wp-security Version 3.2.3
Bit51 ≫ Better-wp-security Version 3.2.5
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Kadence Security – Password, Two Factor Authentication, and Brute Force Protection
Version
*-3.2.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.65% | 0.735 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
http://bit51.com/software/better-wp-security/changelog/
http://plugins.trac.wordpress.org/changeset?old_path=%2Fbetter-wp-security&old=542852&new_path=%2Fbetter-wp-security&new=542852
https://www.wordfence.com/threat-intel/vulnerabilities/id/d2ccdafb-39f4-4249-95fa-a3d752c435f4