What is CVE-2014-9292?

CVE-2014-9292 is a vulnerability in Jrss Widget Project. Published 2014-12-05.

Is CVE-2014-9292 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Jrss Widget Project

CVE-2014-9292

Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and enumerate open ports via the url parameter.

EPSS: 0.019 (77.4th percentile) — read the EPSS interpretation.

Affected products

Jrss_widget_project Jrss_widget
N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-9292?: CVE-2014-9292 is a vulnerability in Jrss Widget Project. Published 2014-12-05.
Is CVE-2014-9292 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.