CVE-2014-9013

Summary: CVE-2014-9013 affects the WordPress WP Marketplace plugin (version 2.4.0) and is triggered via the ajaxinit function in wpmarketplace/libs/cart.php. The vulnerability allows remote authenticated users to call wpmp_pp_ajax_call and, through the execution target wp_insert_user or related c...

WP Marketplace <= 2.4.0 - Arbitrary File Download

The wpmarketplace WordPress plugin was affected by an Arbitrary File Download security vulnerability...

WP Marketplace 1.5.0-1.6.1 - Arbitrary File Upload

The wpmarketplace WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WP Marketplace 1.2.1 - File Enumeration Weakness & File Upload Vulnerabilities

The wpmarketplace WordPress plugin was affected by a File Enumeration Weakness & File Upload Vulnerabilities security vulnerability...