CVE-2015-2673

CVE-2015-2673 affects the WordPress WP EasyCart plugin (versions 1.1.30–3.0.20). The vulnerability resides in ec_ajax_update_option and ec_ajax_clear_all_taxrates in inc/admin/admin_ajax_functions.php, where lack of input validation allows authenticated users to modify any system option, enabling...

WordPress Plugin WP EasyCart - Unrestricted Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'WordPress WP EasyCart Unrestricted File Upload', 'Description' = %qWordPress Shopping Cart WP EasyCart Plugin for WordPress...

Unrestricted file upload

Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart aka WordPress Shopping Cart plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a...

WordPress WP EasyCart Plugin <= 2.0.5 - Information Disclosure

Because of this vulnerability, the attackers can obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the "phpinfo" function. Solution Update the plugin...