ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2014-9035

Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
An official patch is available. Apply the patch as soon as possible.
-
CVSS
0.0
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21PoCE: U→P0.0 → 0.0
2026-07-21nvdpatch: Unavailable→Official Patch0.0 → 0.0
2026-07-21cve.orginitial, patch: Unavailable0.0
References: CVE.org · NVD · PoC

Affected Software
VendorProductVersion
debiandebian_linux7.0
debiandebian_linux8.0
wordpresswordpress≤ 3.7.4
wordpresswordpress3.8
wordpresswordpress3.8.1
wordpresswordpress3.8.2
wordpresswordpress3.8.3
wordpresswordpress3.8.4
wordpresswordpress3.9
wordpresswordpress3.9.1
wordpresswordpress3.9.2
wordpresswordpress4.0
Published: 2014-11-25