CVE-2014-7958
BulletProof Security < .51.1 - Cross-Site Scripting
Severity Score
5.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.
Vulnerabilidad de XSS en admin/htaccess/bpsunlock.php en el plugin BulletProof Security anterior a .51.1 para WordPress permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro dbhost.
CVE-2014-7958: Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the dbhost parameter.
WordPress Bulletproof-Security version .51 suffers from SSRF, cross site scripting, and remote SQL injection vulnerabilities.
*Credits:
Pietro Oliva
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-10-07 CVE Reserved
- 2014-11-05 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/archive/1/533904/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/70916 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| http://packetstormsecurity.com/files/128977/WordPress-Bulletproof-Security-.51-XSS-SQL-Injection-SSRF.html | 2024-08-06 |
| URL | Date | SRC |
|---|---|---|
| https://wordpress.org/plugins/bulletproof-security/changelog | 2021-12-16 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .44 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".44" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .44.1 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".44.1" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.1 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.1" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.2 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.2" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.3 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.3" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.4 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.4" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.5 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.5" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.6 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.6" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.7 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.7" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.8 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.8" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .45.9 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".45.9" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.1 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.1" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.2 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.2" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.3 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.3" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.4 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.4" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.5 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.5" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.6 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.6" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.7 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.7" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.8 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.8" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .46.9 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".46.9" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.1 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.1" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.2 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.2" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.3 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.3" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.4 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.4" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.5 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.5" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.6 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.6" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.7 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.7" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.8 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.8" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .47.9 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".47.9" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.1 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.1" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.2 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.2" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.3 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.3" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.4 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.4" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.5 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.5" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.6 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.6" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.7 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.7" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.8 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.8" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .48.9 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".48.9" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.1 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.1" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.2 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.2" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.3 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.3" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.4 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.4" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.5 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.5" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.6 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.6" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.7 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.7" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.8 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.8" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .49.9 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".49.9" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.1 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.1" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.2 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.2" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.3 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.3" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.4 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.4" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.5 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.5" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.6 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.6" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.7 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.7" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.8 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.8" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .50.9 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".50.9" | wordpress |
Affected
| ||||||
| Ait-pro Search vendor "Ait-pro" | Bulletproof Security Search vendor "Ait-pro" for product "Bulletproof Security" | .51 Search vendor "Ait-pro" for product "Bulletproof Security" and version ".51" | wordpress |
Affected
| ||||||