Input validation vulnerability in WordPress Brute Force Protection – Stop Brute Force Attacks 2.2.6

The WordPress Brute Force Protection plugin, used to prevent attacks on WordPress websites, has a vulnerability called Reflected Cross-Site Scripting. This is because the plugin uses add_query_arg and remove_query_arg without proper protection on the website’s URL. This means that unauthorized users could potentially inject harmful scripts onto web pages if they can trick a user into clicking on a link.