FKIE_CVE-2014-5344
Vulnerability from fkie_nvd - Published: 2014-08-19 18:55 - Updated: 2026-06-17 00:11
Severity
Summary
Multiple cross-site scripting (XSS) vulnerabilities in the Mobiloud (mobiloud-mobile-app-plugin) plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.
References
Impacted products
{
"affected": [
{
"affectedData": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"source": "cve@mitre.org"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:*:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "5BBD83EC-5BE1-4301-B32C-3A6507BFFCEE",
"versionEndIncluding": "2.3.7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "FE864863-4E14-4862-A31E-2D3F34CF81E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.2.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "7AB98287-12BF-42CD-9703-C281FC808818",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.2.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C6BC7E0C-CC7E-4045-9A0F-FA3CE82F6D7F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.2.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "62632FB3-545E-422D-B3FC-6BF4A3923061",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.2.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A0359B96-68E8-4A04-A614-DB2D24447C74",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "107B6590-A622-4C7E-BAEF-754BD742FF90",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.3.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A39AC4AA-7019-4319-84FD-C9B810B01DC6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.3.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "45BD8055-344C-4F0A-9E68-F370F9DCD632",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.3.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "2012949A-EE98-443C-BAAE-A808E53B5A5A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "EE2FAF3C-2E5C-40B1-9336-53774045CF82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.4.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C4B394B7-DD72-4FA1-A8BF-8D2B9A1662A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "EB0190FF-A1AB-42F9-A544-B3B503ECBEE2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.5.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4B0E48DD-7DD7-4833-9923-2C2F1C7482EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.5.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4A8A9C32-1FAC-4A99-82FA-9A5EE4DC46E1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.5.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "2F2B8FAB-775F-4D2D-BA1E-EE5422B223AB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.5.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "89A2C21B-5E72-43C7-A3E8-9FC7608D386C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E6D95252-7EA5-425E-8FD6-1391AB583C75",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.6.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B5385F37-45E6-49EA-B58E-805FCE42C31B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.6.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E708CF4A-09CF-469D-837C-CB8C9432BB57",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "86213740-F87E-48EF-A7ED-82CA8893A298",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.7.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "00153A9F-8704-44BB-9EE6-62D6748A4596",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.7.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B9E2AD4E-0D77-4EC9-AB8F-1E21939553DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.7.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "39F0D709-6FC1-4964-B50A-AC8727D246EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.7.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "74C77986-1C69-464A-BEC6-4BB38F22162A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.7.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E0F5FE84-D3A3-4509-8043-BCEF297C6798",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "413866A8-B8B0-484F-9E4D-4B94CD0BCF36",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "76C531FA-24BF-4822-B72F-015BC4E8EE9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0232A080-A1E8-42AD-B680-9132C45A9046",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "12FFAA29-8817-4574-AB36-ED682563A98D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "3A1D7339-8A4E-4D65-9FBF-18D83AEFE3F7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "39C5C791-236E-4C8B-BA76-52CC7931E243",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "040AAD57-B595-4E30-8DE2-2FB17D03059D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CC65C002-837A-4A6F-9D11-214223DC7378",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "25169987-93A9-4D49-9D7E-129B4AC76776",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D1C7C4BF-67BA-485E-8C2D-4042D406DA68",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8244B04C-0071-40FE-A3F6-763714397079",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "AA489FD4-C2DE-48EB-BA1B-150FCD8E3D39",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "19926750-CDA8-41A6-B8C9-D159EFC3ACBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.8.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "966F8B5B-9DC5-4FA4-8A5B-2421B923B2AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.9.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "693B1ABD-B251-4A01-BDD5-C386A6229166",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:1.9.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "124CC141-933A-43F3-8C22-99C79BA9931D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:2.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4FD4BC5A-4593-4157-A9AF-7A0F11E55AA2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:2.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CF95B7CD-C833-498A-8C46-B278CE237BEB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mobiloud:mobiloud:2.3.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "07ED0A24-50AE-411A-AF2D-DB4908D62F31",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in the Mobiloud (mobiloud-mobile-app-plugin) plugin before 2.3.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information."
},
{
"lang": "es",
"value": "M\u00faltiples vulnerabilidades de XSS en el plugin Mobiloud (mobiloud-mobile-app-plugin) anterior a 2.3.8 para WordPress permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s de vectores no especificados. NOTA: algunos de estos detalles se obtienen de informaci\u00f3n de terceras partes."
}
],
"id": "CVE-2014-5344",
"lastModified": "2026-06-17T00:11:24.693",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2014-08-19T18:55:03.390",
"references": [
{
"source": "cve@mitre.org",
"url": "http://secunia.com/advisories/60530"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch"
],
"url": "http://wordpress.org/plugins/mobiloud-mobile-app-plugin/changelog"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://secunia.com/advisories/60530"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
],
"url": "http://wordpress.org/plugins/mobiloud-mobile-app-plugin/changelog"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…