Bulletproof Security

Vendor:

First CVE: Aug 13, 2012 · Active for 13 years

9
Total CVEs
More Total CVEs than 88% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
4.9
Avg CVSS
Higher Avg CVSS than 8% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Bulletproof Security over time

Volume of CVEsAvg CVSS Base Score
First CVE
Aug 13, 2012
13 years ago
Most Recent CVE
May 16, 2022
1,533 days ago

CVE Severity & Scoring

Bulletproof Security9 CVEs
All CVEs352,785 CVEs
Medium
Attack Vector
Local0 (0.0%)
Network4 (44.4%)
Unknown5 (55.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (44.4%)
High0 (0.0%)
Unknown5 (55.6%)
User Interaction
None1 (11.1%)
Unknown5 (55.6%)
Required3 (33.3%)
Privileges Required
Low0 (0.0%)
High3 (33.3%)
None1 (11.1%)
Unknown5 (55.6%)

Top CVEs

Signals from CVEs in this product scope (9 CVEs).

9 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-39327MEDIUM
The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backup_log.txt file which
Sep 17, 20215.382NOYES
CVE-2022-1265MEDIUM
The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perform Cross-Site Script
May 16, 20224.819NONO
CVE-2022-0590MEDIUM
The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attac
Mar 21, 20224.818NONO
CVE-2014-7959MEDIUM
SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to execute arbitrary SQL
Nov 6, 20146.518NONO
CVE-2012-4268MEDIUM
Cross-site scripting (XSS) vulnerability in bulletproof-security/admin/options.php in the BulletProof Security plugin before .47.1 for WordPress allows remote attackers to inject a
Aug 13, 20124.317NONO
CVE-2015-9230MEDIUM
In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators v
Sep 12, 20174.815NONO
CVE-2014-8749MEDIUM
Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger ou
Dec 1, 20145.015NONO
CVE-2014-7958MEDIUM
Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary w
Nov 6, 20144.314NONO
CVE-2013-3487MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web s
Mar 3, 20144.314NONO
View all 9 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (9 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
11.1% of CVEs· 97th percentile
Nuclei
1 CVE
11.1% of CVEs· 97th percentile
ExploitDB
1 CVE
11.1% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (9 CVEs).

Media Mentions

Signals from CVEs in this product scope (9 CVEs).

Top CNAs Publishing CVEs For Bulletproof Security

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
.52.414.81.6%00
.5125.42.3%00
.50.925.42.3%00
.50.825.42.3%00
.50.725.42.3%00
.50.625.42.3%00
.50.525.42.3%00
.50.425.42.3%00
.50.325.42.3%00
.50.225.42.3%00
.50.125.42.3%00
.5025.42.3%00
.49.925.42.3%00
.49.825.42.3%00
.49.725.42.3%00
.49.625.42.3%00
.49.525.42.3%00
.49.425.42.3%00
.49.325.42.3%00
.49.225.42.3%00