WordPress Advanced XML Reader Plugin <= 0.3.4 - External Entity Injection

Because of this vulnerability, attackers can read system files or load the wp-config.php file. Solution Update the plugin...

UBUNTU-CVE-2015-0252

internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service segmentation fault and crash via crafted XML data...

Advanced XML Reader 0.3.4 - XML External Entity (XXE) Injection

The advanced-xml-reader WordPress plugin was affected by a XML External Entity XXE Injection security vulnerability...