AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2014-9031

MEDIUM · CVSS 4.3 EPSS 4.98%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-11-25 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2014-9031
Severity
MEDIUM
CVSS
4.3
EPSS
4.98%
WordPress

Original Filing — NVD Description

Cross-site scripting (XSS) vulnerability in the wptexturize function in WordPress before 3.7.5, 3.8.x before 3.8.5, and 3.9.x before 3.9.3 allows remote attackers to inject arbitrary web script or HTML via crafted use of shortcode brackets in a text field, as demonstrated by a comment or a post.