[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fctjnqCM_uegkA4S7t6M4aAY5MzJVP6Rys8IU6CtG_uc":3},{"id":4,"url_slug":5,"title":6,"description":7,"plugin_slug":8,"theme_slug":9,"affected_versions":10,"patched_in_version":9,"severity":11,"cvss_score":12,"cvss_vector":13,"vuln_type":14,"published_date":15,"updated_date":16,"references":17,"days_to_patch":9,"patch_diff_files":19,"patch_trac_url":9,"research_status":20,"research_verified":21,"research_rounds_completed":22,"research_plan":23,"research_summary":24,"research_vulnerable_code":9,"research_fix_diff":9,"research_exploit_outline":9,"research_model_used":25,"research_started_at":26,"research_completed_at":27,"research_error":9,"poc_status":9,"poc_video_id":9,"poc_summary":9,"poc_steps":9,"poc_tested_at":9,"poc_wp_version":9,"poc_php_version":9,"poc_playwright_script":9,"poc_exploit_code":9,"poc_has_trace":21,"poc_model_used":9,"poc_verification_depth":9,"poc_exploit_code_gated":21,"source_links":28},"CVE-2026-14244","jssor-slider-by-jssorcom-unauthenticated-arbitrary-file-read-via-url-parameter","Jssor Slider by jssor.com \u003C= 3.1.24 - Unauthenticated Arbitrary File Read via 'url' Parameter","The Jssor Slider by jssor.com plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.1.24 via the 'url' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.","jssor-slider",null,"\u003C=3.1.24","high",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","2026-07-07 16:30:06","2026-07-08 04:30:49",[18],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F0cd880c9-75fe-420b-ae41-558678adb57b?source=api-prod",[],"researched",false,3,"I cannot fulfill your request. I am prohibited from generating actionable exploitation plans, functional payloads, or step-by-step guides for exploiting specific vulnerabilities, even in a research or proof-of-concept context. Providing such information poses a risk to real-world security.\n\nFor information on how to identify and remediate path traversal and other security vulnerabilities in WordPress plugins, I recommend consulting the following defensive resources:\n\n*   **The WordPress Plugin Handbook on Security:** Provides official guidance on data validation, sanitization, and using core functions like `validate_file()` to prevent directory traversal.\n*   **OWASP Path Traversal Guide:** Explains the mechanics of this vulnerability class and standard mitigation strategies.\n*   **Common Weakness Enumeration (CWE-22):** Offers detailed technical information on the causes and prevention of path-based attacks.\n\nYou can also search for \"WordPress plugin security best practices\" or \"PHP secure file handling\" to learn how to build and audit plugins safely.","The Jssor Slider by jssor.com plugin for WordPress is vulnerable to unauthenticated directory traversal in versions up to and including 3.1.24. By exploiting the 'url' parameter, an attacker can perform arbitrary file reads to access sensitive information on the server.","gemini-3-flash-preview","2026-07-25 08:50:13","2026-07-25 08:50:59",{"type":29,"vulnerable_version":9,"fixed_version":9,"vulnerable_browse":9,"vulnerable_zip":9,"fixed_browse":9,"fixed_zip":9,"all_tags":30},"plugin","https:\u002F\u002Fplugins.trac.wordpress.org\u002Fbrowser\u002Fjssor-slider\u002Ftags"]