Ait-pro Bulletproof Security — known CVE vulnerabilities

Every CVE whose affected-product data names Ait-pro Bulletproof Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2014-7959 — CVSS 6.5 (medium): SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote…
• CVE-2021-39327 — CVSS 5.3 (medium): The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly…
• CVE-2014-8749 — CVSS 5.0 (medium): Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for…
• CVE-2015-9230 — CVSS 4.8 (medium): In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible…
• CVE-2022-1265 — CVSS 4.8 (medium): The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow…
• CVE-2022-0590 — CVSS 4.8 (medium): The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2014-7958 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress…