CVE-2014-9014

2019-11-0620:34:10

mitre

www.cve.org

4.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a … (dot dot) in the file parameter.