Wp Cross Rss

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-4941 Jul 11, 20:55 MEDIUM POC This Month

Absolute path traversal vulnerability in Cross-RSS (wp-cross-rss) plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Path Traversal Wp Cross Rss

NVD

CVSS 2.0

5.0

EPSS

0.4%

CVE-2014-4941

EPSS 0% CVSS 5.0

MEDIUM POC This Month

Absolute path traversal vulnerability in Cross-RSS (wp-cross-rss) plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress Path Traversal +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy