CVE-2014-8584
Published Nov 4, 2014
Last updated a year ago
CVSS info 4.3
WordPress
Web Dorado Spider Video Player
- Description
- Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Source
- cve@mitre.org
- NVD status
- Deferred
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
- nvd@nist.gov
- CWE-79
- Hype score
- Not currently trending
CVE-2024-8440这个能够直接提权的漏洞外，sandboxescaper还公布了两个越权删除任意文件的EXP(CVE-2014-8584)和一个越权读取任意文件的EXP。12月份公布的后两个漏洞虽然也是Windows中的逻辑问题，但是与RPC无关。 技术联系
@Ii6Roun7
31 Aug 2025
2595 Impressions
0 Retweets
44 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-8440这个能够直接提权的漏洞外，sandboxescaper还公布了两个越权删除任意文件的EXP(CVE-2014-8584)和一个越权读取任意文件的EXP。 12月份公布的后两个漏洞虽然也是Windows中的逻辑问题，但是与RPC无关。 https://t.co
@JoiR666
29 Aug 2025
2401 Impressions
0 Retweets
65 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:web-dorado:web-dorado_spider_video_player:1.4.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "73CFC809-4962-4898-918A-6F536A7C89B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:web-dorado:web-dorado_spider_video_player:1.4.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C284C9B9-B111-41A6-AFF9-97D787A6EC7B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:web-dorado:web-dorado_spider_video_player:1.4.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0002DD12-127A-49FA-93BF-0156EA5B1681",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:web-dorado:web-dorado_spider_video_player:1.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8E5211A7-9AB1-461F-8574-6320DA6A7448",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:web-dorado:web-dorado_spider_video_player:1.5.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "FD12BDDE-B5ED-4FF3-B671-3A2C1D2B36D6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]