CVE-2014-100026

MEDIUM 4.3 CVSS 2.0

Published: January 13, 2015
Last modified: June 17, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-79
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information.

Affected WordPress components

aprils-super-functions-pack Plugin · aprils-super-functions-pack

Confirmed match Homeless

Versions not specified
View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

n/a n/a — Versions not specified
april\'s_super_functions_pack_project april\'s_super_functions_pack — Up to and including 1.4.7

References

osvdb.org http://osvdb.org/101807
secunia.com http://secunia.com/advisories/55576
www.securityfocus.com http://www.securityfocus.com/bid/64699
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/90172
wordpress.org https://wordpress.org/plugins/aprils-super-functions-pack/changelog/ Patch
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected WordPress components

Affected products and versions

References