CVE-2014-9013

Summary: CVE-2014-9013 affects the WordPress WP Marketplace plugin (version 2.4.0) and is triggered via the ajaxinit function in wpmarketplace/libs/cart.php. The vulnerability allows remote authenticated users to call wpmp_pp_ajax_call and, through the execution target wp_insert_user or related c...

CVE-2014-9013: Improper Input Validation

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmpppajaxcall with an execution target of wpinsertuser...

WP Marketplace <= 2.4.0 - Arbitrary File Download

The wpmarketplace WordPress plugin was affected by an Arbitrary File Download security vulnerability...

WP Marketplace 1.2.1 - File Enumeration Weakness & File Upload Vulnerabilities

The wpmarketplace WordPress plugin was affected by a File Enumeration Weakness & File Upload Vulnerabilities security vulnerability...

WP Marketplace 1.5.0-1.6.1 - Arbitrary File Upload

The wpmarketplace WordPress plugin was affected by an Arbitrary File Upload security vulnerability...