Wordfence Security – Firewall, Malware Scan, and Login Security

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Wordfence Security – Firewall, Malware Scan, and Login Security

Information

Software Type Plugin
Software Slug wordfence (view on wordpress.org)
Software Status Active
Software Author mmaunder
Software Website www.wordfence.com
Software Downloads 365,964,475
Software Active Installs 5,000,000
Software Record Last Updated December 22, 2024

12 Vulnerabilities

Submit a Vulnerability
Wordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2022-3144
Sep 6, 2022
Researcher: Ori Gabriel
Wordfence Security – Firewall & Malware Scan <= 7.1.13 - Reflected Cross-Site Scripting and Information Disclosure
4.7
CVE ID Unknown
Oct 2, 2018
Researcher: Janek Vind
Wordfence Security – Firewall & Malware Scan 6.1.1 - 6.1.6 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
May 10, 2016
Researcher: Kacper Szurek
Wordfence <= 5.1.4 - Reflected Cross-Site Scripting
6.1
CVE-2014-4932
Dec 8, 2014
Researcher: nikhil
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST
7.2
CVE ID Unknown
Sep 27, 2014
Researcher: Voxel@Night
Wordfence <= 5.2.3 - Multiple Protection Mechanism Bypasses
6.5
CVE ID Unknown
Sep 14, 2014
Researcher: Voxel@Night
Wordfence <= 5.2.3 - Stored Cross-Site Scripting via REQUEST_URI
7.2
CVE ID Unknown
Sep 14, 2014
Researcher: Voxel@Night
Wordfence <= 5.2.2 - Stored Cross-Site Scripting
7.2
CVE ID Unknown
Sep 8, 2014
Researcher: Voxel@Night
Wordfence Security <= 3.8.1 - Stored Cross-Site Scripting
7.2
CVE ID Unknown
Aug 1, 2014
Researcher: Dylan Irzi
Wordfence Security – Firewall & Malware Scan <= 5.1.3 - Cross-Site Scripting
7.2
CVE-2014-4664
Jul 30, 2014
Researcher: Narendra
Wordfence Security - Firewall & Malware Scan <= 3.3.6 - Stored Cross-Site Scripting
6.5
CVE ID Unknown
Oct 19, 2012
Researchers:
Wordfence < 3.3.7 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Oct 19, 2012
Researcher: Eugene Dokukin
Title Status CVE ID CVSS Researchers Date
Wordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2022-3144 4.4 Ori Gabriel September 6, 2022
Wordfence Security – Firewall & Malware Scan <= 7.1.13 - Reflected Cross-Site Scripting and Information Disclosure Patched 4.7 Janek Vind October 2, 2018
Wordfence Security – Firewall & Malware Scan 6.1.1 - 6.1.6 - Reflected Cross-Site Scripting Patched 6.1 Kacper Szurek May 10, 2016
Wordfence <= 5.1.4 - Reflected Cross-Site Scripting Patched CVE-2014-4932 6.1 nikhil December 8, 2014
Wordfence Security <= 5.2.3 - Stored Cross-Site Scripting via HTTP_HOST Patched 7.2 Voxel@Night September 27, 2014
Wordfence <= 5.2.3 - Multiple Protection Mechanism Bypasses Patched 6.5 Voxel@Night September 14, 2014
Wordfence <= 5.2.3 - Stored Cross-Site Scripting via REQUEST_URI Patched 7.2 Voxel@Night September 14, 2014
Wordfence <= 5.2.2 - Stored Cross-Site Scripting Patched 7.2 Voxel@Night September 8, 2014
Wordfence Security <= 3.8.1 - Stored Cross-Site Scripting Patched 7.2 Dylan Irzi August 1, 2014
Wordfence Security – Firewall & Malware Scan <= 5.1.3 - Cross-Site Scripting Patched CVE-2014-4664 7.2 Narendra July 30, 2014
Wordfence Security - Firewall & Malware Scan <= 3.3.6 - Stored Cross-Site Scripting Patched 6.5 October 19, 2012
Wordfence < 3.3.7 - Reflected Cross-Site Scripting Patched 6.1 Eugene Dokukin October 19, 2012

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation