CVE-2014-10383

The memphis-documents-library plugin for WordPress (before 3.0) is affected by a Remote File Inclusion vulnerability. The root cause is an input handling/validation weakness that can lead to inclusion of remote files, with potential compromise of affected sites. Mitigation per sources is to updat...

CVE-2014-10385

CVE-2014-10385 affects the memphis-documents-library WordPress plugin prior to version 3.0. The vulnerability is an XSS flaw triggered via the $_REQUEST parameter, allowing an attacker to inject and execute client-side script in affected pages. The impact is described as cross-site scripting; no ...

CVE-2014-10384

CVE-2014-10384 affects the memphis-documents-library WordPress plugin prior to version 3.0. The root cause is Local File Inclusion (LFI), allowing an attacker to access local files via the vulnerable plugin. Remote/unsanitized input handling is identified in the CVE entries, with multiple nationa...