Cross-Site Scripting Vulnerability in Wordfence Security Plugin for WordPress
CVE-2014-4664

Currently unrated

Key Information:

Vendor: Wordpress
Status: Wordfence Security
Vendor: CVE Published:; 6 November 2014

What is CVE-2014-4664?

A cross-site scripting vulnerability exists in the Wordfence Security plugin for WordPress prior to version 5.1.4. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML via a crafted 'whoisval' parameter on the WordfenceWhois page, which is processed by wp-admin/admin.php. Successful exploitation can enable attackers to execute unauthorized code in the context of the victim's browser, potentially leading to data theft, session hijacking, or website defacement.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch