WordPress Plugin Vulnerabilities

Advanced XML Reader 0.1.1 - XML External Entity (XXE) Data Parsing Arbitrary File Disclosure

Description

The advanced-xml-reader WordPress plugin was affected by a XML External Entity (XXE) Data Parsing Arbitrary File Disclosure security vulnerability.

Affects Plugins

Plugin icon
advanced-xml-reader
No known fix

References

URL
https://seclists.org/bugtraq/2013/May/5

Classification

Type
XXE
OWASP top 10
A4: XML External Entities (XXE)
CWE
CWE-611

Miscellaneous

Verified
No
WPVDB ID
c782900c-495f-4dd8-8208-b0f48349858a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-10-24
Title
Royal Elementor Addons < 1.3.981 - Authenticated (Author+) External Entity Injection
Published
2025-06-03
Title
Category Icon <= 1.0.3 - Author+ XML External Entity Injection
Published
2021-04-15
Title
WordPress 5.6-5.7 - Authenticated XXE Within the Media Library Affecting PHP 8
Published
2015-06-10
Title
WooCommerce 2.0.20-2.3.10 - Object Injection / XXE
Published
2014-08-01
Title
Advanced XML Reader 0.3.4 - XML External Entity (XXE) Injection