WordPress Better WP Security Plugin Multiple Security Vulnerabilities
BID:65577
Info
WordPress Better WP Security Plugin Multiple Security Vulnerabilities
| Bugtraq ID: | 65577 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2014 12:00AM |
| Updated: | Feb 15 2014 12:00AM |
| Credit: | Yashar Shahinzadeh |
| Vulnerable: |
WordPress Better WP Security 3.6.3 |
| Not Vulnerable: | |
Discussion
WordPress Better WP Security Plugin Multiple Security Vulnerabilities
The Better WP Security plugin for WordPress is prone to the following security vulnerabilities:
1. Information Disclosure vulnerability
2. HTML injection vulnerability
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application or obtain sensitive information that may aid in launching further attacks.
Better WP Security 3.6.3 is vulnerable; other versions may also be affected.
The Better WP Security plugin for WordPress is prone to the following security vulnerabilities:
1. Information Disclosure vulnerability
2. HTML injection vulnerability
Exploiting these issues could allow an attacker to run malicious HTML and script codes, steal cookie-based authentication credentials, compromise the application or obtain sensitive information that may aid in launching further attacks.
Better WP Security 3.6.3 is vulnerable; other versions may also be affected.
Exploit / POC
WordPress Better WP Security Plugin Multiple Security Vulnerabilities
Attackers can exploit these issues through a browser.
Attackers can exploit these issues through a browser.
References
WordPress Better WP Security Plugin Multiple Security Vulnerabilities
References:
References:
- WordPress Better WP Security Plugin HomePage (WordPress)
- WordPress Homepage (WordPress)