Cross-Site Scripting Vulnerability in Frontend Uploader Plugin for WordPress
CVE-2014-9444

Currently unrated

Key Information:

Vendor: Wordpress
Status: Frontend Uploader
Vendor: CVE Published:; 2 January 2015

What is CVE-2014-9444?

A cross-site scripting (XSS) vulnerability exists in the Frontend Uploader plugin version 0.9.2 for WordPress. This flaw allows remote attackers to inject arbitrary web scripts or HTML into the application, specifically through the 'errors[fu-disallowed-mime-type][0][name]' parameter to the default URI. Successful exploitation of this vulnerability could enable attackers to manipulate content or conduct phishing attacks, thereby compromising the integrity and security of affected WordPress sites.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch