CVE-2013-3487
Estado: ModificadaMedia (4.3)—
Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to (1) 400.php, (2) 403.php, or (3) 403.php.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.29%
- Percentil entre todas las CVEs puntuadas: 83
- Fecha de la puntuación: 2/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-79
Referencias
- http://osvdb.org/95928
- http://osvdb.org/95929
- http://osvdb.org/95930
- http://secunia.com/advisories/53614
- http://wordpress.org/plugins/bulletproof-security/changelog
- http://www.securityfocus.com/bid/61583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86160
- http://osvdb.org/95928
- http://osvdb.org/95929
- http://osvdb.org/95930
- http://secunia.com/advisories/53614
- http://wordpress.org/plugins/bulletproof-security/changelog
- http://www.securityfocus.com/bid/61583
- https://exchange.xforce.ibmcloud.com/vulnerabilities/86160
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-3487",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "PSIRT-CNA@flexerasoftware.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-03-03T16:55:03.977",
"references": [
{
"url": "http://osvdb.org/95928",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://osvdb.org/95929",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://osvdb.org/95930",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://secunia.com/advisories/53614",
"tags": [
"Vendor Advisory"
],
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://wordpress.org/plugins/bulletproof-security/changelog",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://www.securityfocus.com/bid/61583",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86160",
"source": "PSIRT-CNA@flexerasoftware.com"
},
{
"url": "http://osvdb.org/95928",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/95929",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/95930",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/53614",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://wordpress.org/plugins/bulletproof-security/changelog",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/61583",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86160",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the security log in the BulletProof Security plugin before .49 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified HTML header fields to (1) 400.php, (2) 403.php, or (3) 403.php."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de XSS en el registro log de seguridad en el plugin BulletProof Security anterior a .49 para WordPress permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través de campos de cabecera HTML no especificados hacia (1) 400.php, (2) 403.php o (3) 403.php."
}
],
"lastModified": "2026-06-16T23:55:16.310",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "726C98B9-95EB-4B38-8920-676166F82D7F",
"versionEndIncluding": ".48.9"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.45.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D2AEC61-3532-4CF2-9D42-F2A5A7017FA3"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.45.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8BD3B7D-4630-4635-9C8C-E80C74E62873"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.45.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9073809F-746B-4E9F-B82D-CDAC191D1A09"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.45.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0EE3A24-8EE4-458E-823F-0AFCA7A75358"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.45.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A83913B-0F8C-4CA9-8D6D-679451915CEB"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.45.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09285189-F46A-4AF8-B67A-979CAA1E7A74"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DDDDD54-36AA-4EEE-98C6-85CA04340AD4"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90D98BFA-5C4D-40EE-A220-EE3B4E7AB5A6"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "249104CC-B3B0-46EA-BEF8-3FBAB8A2F8C9"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B45882E8-4C83-47EC-A72C-9853B7DB2FD7"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB785C1F-388F-4A6C-ABD1-21F22049DA96"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8378071-6297-493C-9F04-96DE7092F6EB"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB27728E-3E4C-4FD8-A2E2-8A3AA92FC4B7"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99E27B4A-0B71-4F5F-B701-2F4A45CBAE06"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0136668-A50D-4B7C-946F-37251CF96512"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.46.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B644E32B-30B4-4816-BBC4-9DC1C856AC85"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B7A4697-592E-49F6-A3C9-A152038DDB4F"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA60BA90-5500-42B7-847D-1EC5A5EF18BB"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4B82D02-DE66-4B73-B6E7-803A967C8DC5"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00F25E6F-95CC-437C-A35F-3C85088BC1A8"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B97E0878-ED0A-418C-A9F6-8127C2575413"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83B4B544-A222-49E2-B20D-C41CA57A10FE"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EF131CA-5C85-4B4B-9A56-61C47AAEFB08"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F8CFD0B-34A2-42CC-9840-0DE073829F99"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3F6C7B6-2188-4D8F-9013-6A8B5BCCDC1D"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.47.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B5B3CF5D-C559-4D3E-BF8C-CD47EB7CBA78"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21840A8F-2D72-4A3A-858E-3387A5ACEC18"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10D9A68B-52C1-4F4F-A540-AC28B3FB4934"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55A9395E-C31C-4467-BC44-8ABC6EE242AC"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25FBFC8F-5DD0-479C-B027-00CBA1DA065B"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2130F713-886B-41FD-9BE6-B06169C15165"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4E20DD3-AE98-44C9-958C-594FE9BFBF41"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84A25C2D-D414-46A9-8553-C2276FAED0FC"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E64FA5F-33B8-495E-BD22-EC4FD38CAA9F"
},
{
"criteria": "cpe:2.3:a:ait-pro:bulletproof-security:.48.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "321178F1-1DBB-4D81-ACF6-BE3892BC0D58"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A77EB0E7-7FA7-4232-97DF-7C7587D163F1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}