WordPress security by component

BulletProof Security

Plugin description

BulletProof Security is a WordPress component with 10 published CVE records in this archive. The latest tracked vulnerability was published Jan 08, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: bulletproof-security

Latest vulnerability

CVE-2025-67931: BulletProof Security: A security weakness

BulletProof Security is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 08, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 08, 2026	CVE-2025-67931 BulletProof Security: A security weakness BulletProof Security is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE7.5 NVDPending
May 16, 2022	CVE-2022-1265 BulletProof Security: Cross-site scripting BulletProof Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
Mar 21, 2022	CVE-2022-0590 BulletProof Security: Cross-site scripting BulletProof Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
Sep 17, 2021	CVE-2021-39327 BulletProof Security: Sensitive information exposure BulletProof Security is affected by sensitive information exposure. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can disclose data that should not be available to the caller.	See mitigation notes	CVE5.3 NVD5.3
Sep 12, 2017	CVE-2015-9230 Bulletproof Security: Cross-site scripting Bulletproof Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
Dec 01, 2014	CVE-2014-8749 Bulletproof Security: Server-side request forgery Bulletproof Security is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE5.0 NVD5.0
Nov 06, 2014	CVE-2014-7959 Bulletproof Security: SQL injection Bulletproof Security is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE6.5 NVD6.5
Nov 06, 2014	CVE-2014-7958 Bulletproof Security: Cross-site scripting Bulletproof Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.3 NVD4.3
Mar 03, 2014	CVE-2013-3487 Bulletproof Security: Cross-site scripting Bulletproof Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.3 NVD4.3
Aug 13, 2012	CVE-2012-4268 Bulletproof Security: Cross-site scripting Bulletproof Security is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.3 NVD4.3