CVE-2014-125132

Published 20 October 2026 · tracked since 21 October 2026

Description

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with malicious '

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-92386
• CVE-2026-92387
• CVE-2026-92388
• CVE-2026-92389
• CVE-2026-86415
• CVE-2026-87862
• CVE-2026-87863
• CVE-2026-87864
• CVE-2026-87865
• CVE-2026-87866

→ Open the live CVE board · all tools