Lucene search

K
wpvulndbEthicalhack3rWPVDB-ID:6C1C4F2F-61A9-4A18-B008-9A94048EC2A8
HistoryFeb 11, 2015 - 12:00 a.m.

EasyCart <= 3.0.15 - Unrestricted File Upload

2015-02-1100:00:00
ethicalhack3r
wpscan.com
7

0.923 High

EPSS

Percentile

99.0%

In versions <= 3.0.8 this can be exploited by authenticating as any WordPress user, and in versions 3.0.9 - 3.0.15 can be exploited by passing a valid password hash being used by any admin in the EasyCart user system.

CPENameOperatorVersion
wp-easycartlt3.0.16

0.923 High

EPSS

Percentile

99.0%