Wordfence Security – Firewall, Malware Scan, And Login Security

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:mmaunder:wordfence_security_–_firewall,_malware_scan,_and_login_security:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMmaunder (a298a8d6-135e-523a-b463-bd5afbbe3e71)
ProductWordfence Security – Firewall, Malware Scan, And Login Security (55564779-737f-553e-9603-e7a83710d570)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3144 vulnerable 2026-06-08 05:47:19.551427 Wordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting
MEDIUM (4.4)
The Wordfence Security – Firewall & Malware Scan plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 7.6.0 via a setting on the options page due to insufficient escaping on the stored value. This makes it possible for authenticated users, with administrative privileges, to inject malicious web scripts into the setting that executes whenever a user accesses a page displaying the affected setting on sites running a vulnerable version.
Published: 2022-09-23T13:54:18.000Z
Updated: 2026-04-08T17:04:06.391Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.