Approved changes feed: RSS · Atom

cpe:2.3:a:ithemes:security:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorIthemes (bc8bb476-bc31-5fe4-a12e-32529c077514)
ProductSecurity (e1361c91-96b2-5279-9590-5f0afa27a9bb)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-7433 vulnerable 2026-06-03 14:39:06.887070 Details available
The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.
Published: 2018-03-02T20:00:00.000Z
Updated: 2024-08-05T06:24:11.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12636 vulnerable 2026-06-03 14:38:04.624137 Details available
The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.
Published: 2018-06-22T16:00:00.000Z
Updated: 2024-08-05T08:38:06.367Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.