CVEvulnerability
CVE-2012-4264
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-08-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263.
Affected configurations
• bit51 better-wp-security (<= 3.2.4)
• bit51 better-wp-security
• bit51 better-wp-security 0.1
• bit51 better-wp-security 0.2
• bit51 better-wp-security 0.3
• bit51 better-wp-security 0.4
• bit51 better-wp-security 0.5
• bit51 better-wp-security 0.6
• bit51 better-wp-security 0.7
• bit51 better-wp-security 0.8
• bit51 better-wp-security 0.9
• bit51 better-wp-security 0.10
• bit51 better-wp-security 0.11
• bit51 better-wp-security 0.13
• bit51 better-wp-security 0.14
• bit51 better-wp-security 0.15
• bit51 better-wp-security 0.16
• bit51 better-wp-security 1.0
• bit51 better-wp-security 1.1
• bit51 better-wp-security 1.2
• bit51 better-wp-security 1.3
• bit51 better-wp-security 1.4
• bit51 better-wp-security 1.5
• bit51 better-wp-security 1.6
• bit51 better-wp-security 1.7
• bit51 better-wp-security 1.8
• bit51 better-wp-security 1.8.1
• bit51 better-wp-security 1.9
• bit51 better-wp-security 2.0
• bit51 better-wp-security 2.1
• bit51 better-wp-security 2.2
• bit51 better-wp-security 2.3
• bit51 better-wp-security 2.4
• bit51 better-wp-security 2.5
• bit51 better-wp-security 2.6
• bit51 better-wp-security 2.7
• bit51 better-wp-security 2.8
• bit51 better-wp-security 2.9
• bit51 better-wp-security 2.10
• bit51 better-wp-security 2.11
• bit51 better-wp-security 2.12
• bit51 better-wp-security 2.13
• bit51 better-wp-security 2.14
• bit51 better-wp-security 2.15
• bit51 better-wp-security 2.16
• bit51 better-wp-security 2.17
• bit51 better-wp-security 2.18
• bit51 better-wp-security 3.0
• bit51 better-wp-security 3.0.1
• bit51 better-wp-security 3.0.2
• bit51 better-wp-security 3.0.3
• bit51 better-wp-security 3.0.4
• bit51 better-wp-security 3.0.5
• bit51 better-wp-security 3.0.6
• bit51 better-wp-security 3.0.7
• bit51 better-wp-security 3.0.8
• bit51 better-wp-security 3.0.9
• bit51 better-wp-security 3.0.10
• bit51 better-wp-security 3.0.11
• bit51 better-wp-security 3.0.12
… and 6 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://bit51.com/software/better-wp-security/changelog/ bit51.com
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fbetter-wp-security&old=542852&new_path=%2Fbetter-wp-security&new=542852 Exploit, Patch
- http://bit51.com/software/better-wp-security/changelog/ bit51.com
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fbetter-wp-security&old=542852&new_path=%2Fbetter-wp-security&new=542852 Exploit, Patch