CVE-2015-2673

Exploit

EPSS 18.93%
Veröffentlicht 06.10.2017 22:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

EasyCart 1.1.30 - 3.0.20 - Privilege Escalation

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.

Mögliche Gegenmaßnahme

WP EasyCart: Shopping Cart and eCommerce Store: Update to version 3.0.21, or a newer patched version

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

NVD 104 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Wpeasycart ≫ Wp Easycart Version 1.1.30 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.1.31 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.1.32 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.1.33 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.1.34 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.1.35 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.1.36 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.0 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.1 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.2 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.3 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.4 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.5 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.6 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.7 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.8 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.9 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.10 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.11 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.12 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.13 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.14 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.15 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 1.2.16 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.1 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.2 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.3 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.4 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.5 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.6 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.7 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.8 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.9 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.10 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.11 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.12 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.13 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.14 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.15 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.16 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.17 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.18 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.19 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.20 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.21 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.0.22 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.0 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.1 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.2 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.3 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.4 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.5 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.6 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.7 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.8 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.9 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.10 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.11 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.12 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.13 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.14 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.15 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.16 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.17 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.18 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.19 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.20 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.21 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.22 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.23 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.24 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.25 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.26 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.27 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.28 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.29 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.30 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.31 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.32 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.33 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.34 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.35 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 2.1.36 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.0 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.1 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.2 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.3 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.4 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.5 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.6 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.7 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.8 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.9 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.10 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.11 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.12 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.13 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.14 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.15 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.16 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.17 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.18 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.19 SwPlatform wordpress

Wpeasycart ≫ Wp Easycart Version 3.0.20 SwPlatform wordpress

Weitere Schwachstelleninformationen

SystemWordPress Plugin

≫

Produkt WP EasyCart: Shopping Cart and eCommerce Store

Version 1.1.30-3.0.20

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	18.93%	0.969

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/

Third Party Advisory

Exploit

https://www.wordfence.com/threat-intel/vulnerabilities/id/91c147f9-8179-4ce0-8d17-87ea47cf08fe

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2015-2673

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-2673

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-2673

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-2673