WordPress Plugin Vulnerabilities

SS Downloads 1.4.4.1 - services/getfile.php file Parameter XSS

Description

The SS Downloads WordPress plugin was affected by a services/getfile.php file Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
ss-downloads
Fixed in 1.5

References

CVE
CVE-2014-4554

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
8c05ff9b-952f-4efb-b08a-e520436559b7

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-27 (about 6 years ago)

Other

Published
Title
Published
2024-10-14
Title
WooCommerce < 9.1.0 - Unauthenticated HTML Injection
Published
2023-05-11
Title
DevBuddy Twitter Feed <= 4.0.0 - Admin+ Stored XSS
Published
2025-05-19
Title
Broadstreet < 1.51.8 - Reflected XSS
Published
2024-04-29
Title
Fancy Elementor Flipbox < 2.5.2 - Contributor+ Stored XSs via Fancy Elementor Flipbox Widget
Published
2023-10-26
Title
Neon text < 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting