Published: 06/10/2017 Updated: 01/11/2017

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 690

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 up to and including 3.0.20 for WordPress allow remote malicious users to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wpeasycart wp easycart 1.2.9
wpeasycart wp easycart 1.2.8
wpeasycart wp easycart 1.2.7
wpeasycart wp easycart 1.2.6
wpeasycart wp easycart 2.0.2
wpeasycart wp easycart 2.0.3
wpeasycart wp easycart 2.0.4
wpeasycart wp easycart 2.0.5
wpeasycart wp easycart 2.0.20
wpeasycart wp easycart 2.0.21
wpeasycart wp easycart 2.0.22
wpeasycart wp easycart 2.1.0
wpeasycart wp easycart 2.1.13
wpeasycart wp easycart 2.1.14
wpeasycart wp easycart 2.1.15
wpeasycart wp easycart 2.1.16
wpeasycart wp easycart 2.1.17
wpeasycart wp easycart 2.1.30
wpeasycart wp easycart 2.1.31
wpeasycart wp easycart 2.1.32
wpeasycart wp easycart 2.1.33
wpeasycart wp easycart 3.0.12
wpeasycart wp easycart 3.0.13
wpeasycart wp easycart 3.0.14
wpeasycart wp easycart 3.0.15
wpeasycart wp easycart 2.0.1
wpeasycart wp easycart 1.2.16
wpeasycart wp easycart 1.2.15
wpeasycart wp easycart 1.2.14
wpeasycart wp easycart 1.2.0
wpeasycart wp easycart 1.1.36
wpeasycart wp easycart 1.1.35
wpeasycart wp easycart 1.1.34
wpeasycart wp easycart 2.0.11
wpeasycart wp easycart 2.0.12
wpeasycart wp easycart 2.0.13
wpeasycart wp easycart 2.0.14
wpeasycart wp easycart 2.0.15
wpeasycart wp easycart 2.1.5
wpeasycart wp easycart 2.1.6
wpeasycart wp easycart 2.1.7
wpeasycart wp easycart 2.1.8
wpeasycart wp easycart 2.1.22
wpeasycart wp easycart 2.1.23
wpeasycart wp easycart 2.1.24
wpeasycart wp easycart 2.1.25
wpeasycart wp easycart 3.0.2
wpeasycart wp easycart 3.0.3
wpeasycart wp easycart 3.0.4
wpeasycart wp easycart 3.0.5
wpeasycart wp easycart 2.0.6
wpeasycart wp easycart 3.0.9
wpeasycart wp easycart 1.1.30
wpeasycart wp easycart 3.0.20
wpeasycart wp easycart 1.2.13
wpeasycart wp easycart 1.2.11
wpeasycart wp easycart 1.2.4
wpeasycart wp easycart 1.2.2
wpeasycart wp easycart 1.1.32
wpeasycart wp easycart 2.0.1\\@824267
wpeasycart wp easycart 2.0.7
wpeasycart wp easycart 2.0.9
wpeasycart wp easycart 2.0.16
wpeasycart wp easycart 2.0.18
wpeasycart wp easycart 2.1.2
wpeasycart wp easycart 2.1.4
wpeasycart wp easycart 2.1.9
wpeasycart wp easycart 2.1.11
wpeasycart wp easycart 2.1.18
wpeasycart wp easycart 2.1.20
wpeasycart wp easycart 2.1.27
wpeasycart wp easycart 2.1.29
wpeasycart wp easycart 2.1.34
wpeasycart wp easycart 2.1.36
wpeasycart wp easycart 3.0.1
wpeasycart wp easycart 3.0.6
wpeasycart wp easycart 3.0.10
wpeasycart wp easycart 3.0.17
wpeasycart wp easycart 3.0.19
wpeasycart wp easycart 3.0.8
wpeasycart wp easycart 1.2.12
wpeasycart wp easycart 1.2.10
wpeasycart wp easycart 1.2.5
wpeasycart wp easycart 1.2.3
wpeasycart wp easycart 1.2.1
wpeasycart wp easycart 1.1.33
wpeasycart wp easycart 1.1.31
wpeasycart wp easycart 2.0.8
wpeasycart wp easycart 2.0.10
wpeasycart wp easycart 2.0.17
wpeasycart wp easycart 2.0.19
wpeasycart wp easycart 2.1.1
wpeasycart wp easycart 2.1.3
wpeasycart wp easycart 2.1.10
wpeasycart wp easycart 2.1.12
wpeasycart wp easycart 2.1.19
wpeasycart wp easycart 2.1.21
wpeasycart wp easycart 2.1.26
wpeasycart wp easycart 2.1.28
wpeasycart wp easycart 2.1.35
wpeasycart wp easycart 3.0.0
wpeasycart wp easycart 3.0.7
wpeasycart wp easycart 3.0.11
wpeasycart wp easycart 3.0.16
wpeasycart wp easycart 3.0.18

CWE-264 http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/https://nvd.nist.gov

Get Started

CVE-2015-2673

Vulnerability Summary

References

Vulmon Search

About

Products

Connect