Cross-rss Plugin Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cross-rss Plugin Project records in CISA KEV

No Cross-rss Plugin Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-cross-rss 1 record LOW

Records

1 record in Wp-cross-rss · all components

TI-2014-04059 CVE-2014-4941 · GHSA-h23j-wq46-j49h

Absolute path traversal vulnerability in Cross-RSS (wp-cross-rss) plugin 1.7 for…

LOW 30

Absolute path traversal vulnerability in Cross-RSS (wp-cross-rss) plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04306 Published 2014-07-11 No fix listed CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0