CVE-2014-4539: Movies Project Movies

Medium severity, CVSS 6.1. EPSS: 4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php.

Affected products

• Movies Project Movies: up to and including 0.6

Published 2019-12-27. Last modified 2026-06-17.