Wordfence Security – Firewall & Malware Scan - Version 6.1.7

Version Description

Security Fix: Fixed reflected XSS vulnerability: CVSS 6.1 (Medium). Thanks Kacper Szurek.

Download this release

Release Info

Developer	wfmatt
Plugin	Wordfence Security – Firewall & Malware Scan
Version	6.1.7
Comparing to
See all releases

Code changes from version 6.1.6 to 6.1.7

Files changed (3) hide show

lib/wordfenceClass.php +1 -1
readme.txt +4 -1
wordfence.php +2 -2

lib/wordfenceClass.php CHANGED Viewed

	@@ -3929,7 +3929,7 @@ directives to put in your nginx.conf to fix this.
3929	";
3930	}
3931
3932	-
3933	$wafActionContent .= "
3934	<form action='$adminURL' method='post'>
3935	<input type='hidden' name='wfnonce' value='$wfnonce'>


3929	";
3930	}
3931
3932	+ $adminURL = esc_url($adminURL);
3933	$wafActionContent .= "
3934	<form action='$adminURL' method='post'>
3935	<input type='hidden' name='wfnonce' value='$wfnonce'>

readme.txt CHANGED Viewed

	@@ -3,7 +3,7 @@ Contributors: mmaunder
3	Tags: wordpress, security, web application firewall, waf, performance, speed, caching, cache, caching plugin, wordpress cache, wordpress caching, wordpress security, security plugin, secure, anti-virus, malware, firewall, antivirus, virus, google safe browsing, phishing, scrapers, hacking, wordfence, securty, secrity, secure, two factor, cellphone sign-in, cellphone signin, cellphone, twofactor, security, secure, htaccess, login, log, users, login alerts, lock, chmod, maintenance, plugin, private, privacy, protection, permissions, 503, base64, injection, code, encode, script, attack, hack, hackers, block, blocked, prevent, prevention, RFI, XSS, CRLF, CSRF, SQL Injection, vulnerability, website security, WordPress security, security log, logging, HTTP log, error log, login security, personal security, infrastructure security, firewall security, front-end security, web server security, proxy security, reverse proxy security, secure website, secure login, two factor security, two factor authentication, maximum login security, heartbleed, heart bleed, heartbleed vulnerability, openssl vulnerability, nginx, litespeed, php5-fpm, woocommerce support, woocommerce caching, IPv6, IP version 6
4	Requires at least: 3.9
5	Tested up to: 4.5.2
6	- Stable tag: 6.1.6
7
8	The Wordfence WordPress security plugin provides free enterprise-class WordPress security, protecting your website from hacks and malware.
9	== Description ==
	@@ -195,6 +195,9 @@ Designed for every skill level, [The WordPress Security Learning Center](https:/
195
196	== Changelog ==
197



198	= 6.1.6 =
199	* Fix: Fixed bug with 2FA not properly handling email address login.
200	* Fix: Show logins/logouts when Live Traffic is disabled.


3	Tags: wordpress, security, web application firewall, waf, performance, speed, caching, cache, caching plugin, wordpress cache, wordpress caching, wordpress security, security plugin, secure, anti-virus, malware, firewall, antivirus, virus, google safe browsing, phishing, scrapers, hacking, wordfence, securty, secrity, secure, two factor, cellphone sign-in, cellphone signin, cellphone, twofactor, security, secure, htaccess, login, log, users, login alerts, lock, chmod, maintenance, plugin, private, privacy, protection, permissions, 503, base64, injection, code, encode, script, attack, hack, hackers, block, blocked, prevent, prevention, RFI, XSS, CRLF, CSRF, SQL Injection, vulnerability, website security, WordPress security, security log, logging, HTTP log, error log, login security, personal security, infrastructure security, firewall security, front-end security, web server security, proxy security, reverse proxy security, secure website, secure login, two factor security, two factor authentication, maximum login security, heartbleed, heart bleed, heartbleed vulnerability, openssl vulnerability, nginx, litespeed, php5-fpm, woocommerce support, woocommerce caching, IPv6, IP version 6
4	Requires at least: 3.9
5	Tested up to: 4.5.2
6	+ Stable tag: 6.1.7
7
8	The Wordfence WordPress security plugin provides free enterprise-class WordPress security, protecting your website from hacks and malware.
9	== Description ==

195
196	== Changelog ==
197
198	+ = 6.1.7 =
199	+ * Security Fix: Fixed reflected XSS vulnerability: CVSS 6.1 (Medium). Thanks Kacper Szurek.
200	+
201	= 6.1.6 =
202	* Fix: Fixed bug with 2FA not properly handling email address login.
203	* Fix: Show logins/logouts when Live Traffic is disabled.

wordfence.php CHANGED Viewed

	@@ -4,14 +4,14 @@ Plugin Name: Wordfence Security
4	Plugin URI: http://www.wordfence.com/
5	Description: Wordfence Security - Anti-virus, Firewall and High Speed Cache
6	Author: Wordfence
7	- Version: 6.1.6
8	Author URI: http://www.wordfence.com/
9	Network: true
10	*/
11	if(defined('WP_INSTALLING') && WP_INSTALLING){
12	return;
13	}
14	- define('WORDFENCE_VERSION', '6.1.6');
15	define('WORDFENCE_BASENAME', function_exists('plugin_basename') ? plugin_basename(__FILE__) :
16	basename(dirname(__FILE__)) . '/' . basename(__FILE__));
17


4	Plugin URI: http://www.wordfence.com/
5	Description: Wordfence Security - Anti-virus, Firewall and High Speed Cache
6	Author: Wordfence
7	+ Version: 6.1.7
8	Author URI: http://www.wordfence.com/
9	Network: true
10	*/
11	if(defined('WP_INSTALLING') && WP_INSTALLING){
12	return;
13	}
14	+ define('WORDFENCE_VERSION', '6.1.7');
15	define('WORDFENCE_BASENAME', function_exists('plugin_basename') ? plugin_basename(__FILE__) :
16	basename(dirname(__FILE__)) . '/' . basename(__FILE__));
17