Ait-pro Bulletproof_security
7 CVEs affecting Ait-pro Bulletproof_security. Latest disclosed: 2022-05-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39327 | Medium | 5.3 | 2021-09-17 | The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backu… |
CVE-2022-1265 | Medium | 4.8 | 2022-05-16 | The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perf… |
CVE-2022-0590 | Medium | 4.8 | 2022-03-21 | The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross… |
CVE-2015-9230 | Medium | 4.8 | 2017-09-12 | In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authentic… |
CVE-2014-8749 | | 2014-12-01 | Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote at… | |
CVE-2014-7959 | | 2014-11-06 | SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to… | |
CVE-2014-7958 | | 2014-11-06 | Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers… |