Lucene search
Anant ShrivastavaPATCHSTACK:481E6BBB7890F921914C9071135857B7HistoryJul 11, 2014 - 12:00 a.m.
WordPress Cross References Plugin <= 1.7 - Local File Inclusion
2014-07-1100:00:00
Anant Shrivastava
patchstack.com
7
0.008 Low
EPSS
Percentile
82.3%
Because of this vulnerability, the attackers can read arbitrary files via a full pathname in the “rss” parameter to proxy.php.
Solution
Update the plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cross references | le | 1.7 |
Related
cve
cve
CVE-2014-4941
2022-10-03 16:20:45
wpvulndb
wpvulndb
Cross RSS 1.7 - proxy.php rss Parameter Local File Inclusion
2014-08-01 10:59:15
prion
prion
Path traversal
2014-07-11 20:55:00
nvd
nvd
CVE-2014-4941
2014-07-11 20:55:03
cvelist
cvelist
CVE-2014-4941
2022-10-03 16:20:45