| Package | Affected versions | Patched versions |
|---|---|---|
| wordfence security | < 5.1.5 | 5.1.5 |
Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free