WordPress Advanced XML Reader Plugin <= 0.3.4 - External Entity Injection

Because of this vulnerability, attackers can read system files or load the wp-config.php file. Solution Update the plugin...

UBUNTU-CVE-2015-0252

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

Advanced XML Reader 0.3.4 - XML External Entity (XXE) Injection

The advanced-xml-reader WordPress plugin was affected by a XML External Entity XXE Injection security vulnerability...

WordPress Plugin: Advanced XML Reader v0.3.4 XXE Vulnerability

The WordPress plugin Advanced XML Reader v0.3.4 published here: http://wordpress.org/extend/plugins/advanced-xml-reader/ is susceptible to XXE XML eXternal Entity processing attacks. After installing the plugin on a Windows machine, I created a text file in the root of C: named "test.txt", which...

WordPress Advanced XML Reader 0.3.4 XXE Injection Vulnerability

WordPress Advanced XML Reader plugin version 0.3.4 suffers from a XXE XML eXternal Entity injection vulnerability The WordPress plugin Advanced XML Reader v0.3.4 published here: http://wordpress.org/extend/plugins/advanced-xml-reader/ is susceptible to XXE XML eXternal Entity processing attacks...