CVE-2014-4941: Cross-Rss Plugin Project Wp-Cross-Rss

Medium severity, CVSS 5.0. EPSS: 4.3% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in Cross-RSS (wp-cross-rss) plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php.

Affected products

• Cross-Rss Plugin Project Wp-Cross-Rss: version 1.7 only

Published 2014-07-11. Last modified 2026-06-17.