CVEvulnerability
CVE-2015-2673
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.
Affected configurations
• wpeasycart wp easycart 1.1.30
• wpeasycart wp easycart 1.1.31
• wpeasycart wp easycart 1.1.32
• wpeasycart wp easycart 1.1.33
• wpeasycart wp easycart 1.1.34
• wpeasycart wp easycart 1.1.35
• wpeasycart wp easycart 1.1.36
• wpeasycart wp easycart 1.2.0
• wpeasycart wp easycart 1.2.1
• wpeasycart wp easycart 1.2.2
• wpeasycart wp easycart 1.2.3
• wpeasycart wp easycart 1.2.4
• wpeasycart wp easycart 1.2.5
• wpeasycart wp easycart 1.2.6
• wpeasycart wp easycart 1.2.7
• wpeasycart wp easycart 1.2.8
• wpeasycart wp easycart 1.2.9
• wpeasycart wp easycart 1.2.10
• wpeasycart wp easycart 1.2.11
• wpeasycart wp easycart 1.2.12
• wpeasycart wp easycart 1.2.13
• wpeasycart wp easycart 1.2.14
• wpeasycart wp easycart 1.2.15
• wpeasycart wp easycart 1.2.16
• wpeasycart wp easycart 2.0.1
• wpeasycart wp easycart 2.0.1\@824267
• wpeasycart wp easycart 2.0.2
• wpeasycart wp easycart 2.0.3
• wpeasycart wp easycart 2.0.4
• wpeasycart wp easycart 2.0.5
• wpeasycart wp easycart 2.0.6
• wpeasycart wp easycart 2.0.7
• wpeasycart wp easycart 2.0.8
• wpeasycart wp easycart 2.0.9
• wpeasycart wp easycart 2.0.10
• wpeasycart wp easycart 2.0.11
• wpeasycart wp easycart 2.0.12
• wpeasycart wp easycart 2.0.13
• wpeasycart wp easycart 2.0.14
• wpeasycart wp easycart 2.0.15
• wpeasycart wp easycart 2.0.16
• wpeasycart wp easycart 2.0.17
• wpeasycart wp easycart 2.0.18
• wpeasycart wp easycart 2.0.19
• wpeasycart wp easycart 2.0.20
• wpeasycart wp easycart 2.0.21
• wpeasycart wp easycart 2.0.22
• wpeasycart wp easycart 2.1.0
• wpeasycart wp easycart 2.1.1
• wpeasycart wp easycart 2.1.2
• wpeasycart wp easycart 2.1.3
• wpeasycart wp easycart 2.1.4
• wpeasycart wp easycart 2.1.5
• wpeasycart wp easycart 2.1.6
• wpeasycart wp easycart 2.1.7
• wpeasycart wp easycart 2.1.8
• wpeasycart wp easycart 2.1.9
• wpeasycart wp easycart 2.1.10
• wpeasycart wp easycart 2.1.11
• wpeasycart wp easycart 2.1.12
… and 45 more
Related
Weakness · not in database (1)
References
- http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/ Exploit, Third Party Advisory
- http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/ Exploit, Third Party Advisory