CVE-2019-9669

The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector

published April 25, 2019

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector. NOTE: It has been asserted that this is not a valid vulnerability in the context of the Wordfence WordPress plugin as the firewall rules are not maintained as part of the Wordfence software but rather it is a set of rules hosted on vendor servers and pushed to the plugin with no versioning associated. Bypassing a WAF rule doesn't make a WordPress site vulnerable (speaking in terms of software vulnerabilities)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01009 · 62.5th percentile
Published
2019-04-25T18:18Z
EPSS history
Timeline
  • 25 APR 18:18Z
    The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector
    cvelistv5