Description

WordPress Plugin iThemes Security (formerly Better WP Security) is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin iThemes Security (formerly Better WP Security) version 6.9.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 6.9.1 or latest

References

https://plugins.svn.wordpress.org/better-wp-security/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Code Insert Manager (Q2W3 Inc Manager) ZeroClipboard Cross-Site Scripting (2.3.1)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8644)

WordPress Plugin Media Library Assistant PHP Object Injection (2.60)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-5106)

Zikula Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-2293)

Severity

High

Classification

CVE-2018-7433

Tags

Missing Update