WordPress Plugin Vulnerabilities

Cross RSS 1.7 - proxy.php rss Parameter Local File Inclusion

Description

The cross-rss WordPress plugin was affected by a proxy.php rss Parameter Local File Inclusion security vulnerability.

Affects Plugins

Plugin icon
cross-rss
No known fix

References

CVE
CVE-2014-4941
URL
https://codevigilant.com/disclosure/wp-plugin-cross-rss-local-file-inclusion/

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
9e6b545d-18b7-4abc-9098-85064811b88c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-09-12
Title
The Hack Repair Guy's Plugin Archiver < 3.1.1 - Authenticated (Administrator+) Arbitrary File Deletion
Published
2025-11-07
Title
CYAN Backup < 2.5.5 - Authenticated (Admin+) Arbitrary File Deletion
Published
2024-05-17
Title
Download Plugins and Themes from Dashboard < 1.8.6 - Authenticated (Admin+) Arbitrary File Download
Published
2014-08-01
Title
Theme My Login 6.3.9 - Local File Inclusion
Published
2021-11-15
Title
All-In-One-Gallery < 2.5.0 - Admin+ Local File Inclusion