WordPress Plugin Vulnerabilities

Hot Files < 1.0.0 - Cross-Site scripting (XSS)

Description

The wphotfiles WordPress plugin was affected by a Cross-Site scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
wphotfiles
No known fix

References

CVE
CVE-2014-4588

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
98366393-feed-4504-b11e-4c4a0c4ce651

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-04-29
Title
Front Editor < 4.4.8 - Admin+ Stored XSS
Published
2024-07-09
Title
Gum Elementor Addon < 1.3.6 - Authenticated (Editor+) Stored Cross-Site Scripting
Published
2026-04-08
Title
List category posts < 0.95.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'catlist' Shortcode
Published
2025-01-16
Title
Google Map With Fancybox <= 2.1.0 - Reflected Cross-Site Scripting
Published
2014-08-01
Title
SS Downloads 1.4.4.1 - templates/emailform.php Multiple Parameter Reflected XSS