Lucene search
MitreCVELIST:CVE-2014-9013HistoryNov 06, 2019 - 8:34 p.m.
CVE-2014-9013
2019-11-0620:34:16
mitre
www.cve.org
The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmp_pp_ajax_call with an execution target of wp_insert_user.
References
Related
prion
prion
Design/Logic Flaw
2019-11-06 21:15:00
zdt
zdt
Wordpress WP Marketplace 2.4.0 - Remote Code Execution (Add WP Admin) Vulnerability
2015-03-27 00:00:00
Wordpress WP Marketplace 2.4.0 Arbitrary File Download Vulnerability
2015-03-21 00:00:00
cve
cve
CVE-2014-9013
2019-11-06 21:15:10
patchstack
patchstack
WordPress Marketplace Plugin 2.4.0 - Arbitrary File Download
2015-03-22 00:00:00
nvd
nvd
CVE-2014-9013
2019-11-06 21:15:10
exploitpack
exploitpack
WordPress Plugin Marketplace 2.4.0 - Arbitrary File Download
2015-03-22 00:00:00
wpvulndb
wpvulndb
WP Marketplace <= 2.4.0 - Arbitrary File Download
2015-03-21 00:00:00
packetstorm
packetstorm
WordPress Marketplace 2.4.0 Arbitrary File Download
2015-03-25 00:00:00
exploitdb
exploitdb
WordPress Plugin Marketplace 2.4.0 - Arbitrary File Download
2015-03-22 00:00:00