CVE-2014-100026: April's Super Functions Pack Project April's Super Functions Pack

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information.

Affected products

• April's Super Functions Pack Project April's Super Functions Pack: up to and including 1.4.7

Published 2015-01-13. Last modified 2026-06-17.