Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2014-4725

🗓️ 27 Jul 2014 18:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 131 Views

The MailPoet Newsletters plugin before 2.6.7 for WordPress allows remote attackers to execute arbitrary PHP code

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2014-4725
7 Jul 201400:00
–circl
Check Point Advisories		WordPress MailPoet Newsletters Unauthenticated File Upload (CVE-2014-4725)
11 Aug 201400:00
–checkpoint_advisories
Cvelist		CVE-2014-4725
27 Jul 201418:00
–cvelist
Dsquare		WordPress MailPoet Newsletters File Upload
1 Sep 201400:00
–dsquare
NVD		CVE-2014-4725
27 Jul 201418:55
–nvd
OpenVAS		WordPress MailPoet Newsletters Plugin Remote File Upload Vulnerability
28 Jul 201400:00
–openvas
Patchstack		WordPress MailPoet (Wysija NewsLetters) plugin - Unauthenticated File Upload
7 Jul 201400:00
–patchstack
Prion		Authentication flaw
27 Jul 201418:55
–prion
VulnCheck KEV		VulnCheck KEV: CVE-2014-4725
5 Dec 202200:00
–vulncheck_kev
Tenable Nessus		MailPoet Newsletters for WordPress Arbitrary File Upload
16 Jul 201400:00
–nessus
Rows per page
NVD
Node
mailpoetmailpoet_newslettersRange≤2.6.6wordpress
OR
mailpoetmailpoet_newslettersMatch0.9wordpress
OR
mailpoetmailpoet_newslettersMatch0.9.1wordpress
OR
mailpoetmailpoet_newslettersMatch0.9.2wordpress
OR
mailpoetmailpoet_newslettersMatch0.9.6wordpress
OR
mailpoetmailpoet_newslettersMatch1.0wordpress
OR
mailpoetmailpoet_newslettersMatch1.0.1wordpress
OR
mailpoetmailpoet_newslettersMatch1.1wordpress
OR
mailpoetmailpoet_newslettersMatch1.1.1wordpress
OR
mailpoetmailpoet_newslettersMatch1.1.2wordpress
OR
mailpoetmailpoet_newslettersMatch1.1.3wordpress
OR
mailpoetmailpoet_newslettersMatch1.1.4wordpress
OR
mailpoetmailpoet_newslettersMatch1.1.5wordpress
OR
mailpoetmailpoet_newslettersMatch2.0wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.5wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.6wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.7wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.8wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.9wordpress
OR
mailpoetmailpoet_newslettersMatch2.0.9.5wordpress
OR
mailpoetmailpoet_newslettersMatch2.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.5wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.6wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.7wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.8wordpress
OR
mailpoetmailpoet_newslettersMatch2.1.9wordpress
OR
mailpoetmailpoet_newslettersMatch2.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.2.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.2.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.2.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.3.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.3.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.3.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.3.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.3.5wordpress
OR
mailpoetmailpoet_newslettersMatch2.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.4.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.4.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.4.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.4.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.5wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.5wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.7wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.8wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.9wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.9.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.9.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.9.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.5.9.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.6wordpress
OR
mailpoetmailpoet_newslettersMatch2.6betawordpress
OR
mailpoetmailpoet_newslettersMatch2.6.1wordpress
OR
mailpoetmailpoet_newslettersMatch2.6.2wordpress
OR
mailpoetmailpoet_newslettersMatch2.6.3wordpress
OR
mailpoetmailpoet_newslettersMatch2.6.4wordpress
OR
mailpoetmailpoet_newslettersMatch2.6.5wordpress

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
06 May 2026 22:30Current
7.9High risk
Vulners AI Score7.9
CVSS 27.5
EPSS0.81793
CWE-287
mailpoet newsletterswordpressremote attackersphp code executionauthentication bypasscve-2014-4725nvd
131