Input validation vulnerability in Wordfence Security – Firewall, Malware Scan, and Login Security 3.3.6

WordPress is a content management system used to create websites. A plugin is an additional feature that can be added to a website. Wordfence is a plugin for WordPress websites that provides a security feature. Versions 3.3.6 and older of Wordfence were vulnerable to Cross-Site Scripting, a type of malicious attack. In the case of Wordfence, this attack was possible via the unlockEmail functionality.