VULNERABILITY INTELLIGENCE

CVE-2014-4580

CVSS score4.3 MEDIUM

EPSS probability1.63%

CISA KEVNot currently listed

Published2014-07-02

Last modified2026-06-17

Description

Cross-site scripting (XSS) vulnerability in blipbot.ajax.php in the WP BlipBot plugin 3.0.9 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the BlipBotID parameter.