← Back

Jrss Widget

jrss_widget

Vendor: Jrss Widget Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-9292
1Jrss Widget Project
1Jrss Widget
May 6, 2026
Dec 5, 2014
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter.