QwikSec

Security Database

CVE

CWE

Training

CVE-2014-8749

Published: Dec 1, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases via the dbhost parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20141106 Wordpress bulletproof-security <=.51 multiple vulnerabilities

mailing-list

x_refsource_FULLDISC

https://wordpress.org/plugins/bulletproof-security/changelog/

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.