AUGUST 25, 2026
Live Feed
Back to database
Case File

CVE-2026-14244

HIGH · CVSS 7.5 EPSS 0.69%

Source: NVD + CISA KEV + EPSS · Published 2026-07-08 · Last synced 2026-08-07

CyberRota Analysis

AI-Generated

The Jssor Slider plugin for WordPress is susceptible to a Directory Traversal vulnerability that allows unauthenticated attackers to access and read arbitrary files on the server through the 'url' parameter. This exposure can lead to the disclosure of sensitive information, posing a significant risk to the integrity and confidentiality of the affected systems. WordPress site administrators using this plugin should prioritize immediate updates to mitigate potential exploitation.

CVE
CVE-2026-14244
Severity
HIGH
CVSS
7.5
EPSS
0.69%
WordPress

Original NVD Description

The Jssor Slider by jssor.com plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.1.24 via the 'url' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.