system
Describe <CVE-2014-4938>.
user
What is <CVE-2014-4938>?
assistant
SQL injection vulnerability in the WP Rss Poster (wp-rss-poster) plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in the wrp-add-new page to wp-admin/admin.php..