Jrss Widget Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jrss Widget Project records in CISA KEV

No Jrss Widget Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jrss Widget 1 record LOW

Records

1 record in Jrss Widget · all components

TI-2014-07540 CVE-2014-9292 · GHSA-572x-mfr5-vhqf

Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin…

LOW 30

Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01889 Published 2014-12-05 No fix listed

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0