CVE-2014-8754 Ad Manager <= 1.1.2 - Open Redirection

MediumCVSS 5.8 EPSS 2.3%

Published: 2014-12-02 18:00
Updated: 2026-06-17 03:17
Exploit status: No public exploit known

Description

Open redirect vulnerability in track-click.php in the Ad-Manager plugin 1.1.2 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the out parameter.

Affected products

Product	Affected versions	Fixed in
ad-manager project ad-manager	= 1.1.2	No fix listed
wordpress-admanager(WordPress)	<= 1.1.2	No fix listed

References

packetstormsecurity.com
20141127 CVE-2014-8754 WordPress "Ad-Manager Plugin " Dest Redirect Privilege Escalation mailing-list
tetraph.com
admanager-wp-cve20148754-open-redirect(98990) vdb-entry
Wordfence Intelligence third-party-advisory
www.cve.org

CVSS v2.0

5.8 Medium

AV:N/AC:M/Au:N/C:P/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: None

All scores (2)

v3.1 6.5 · wordfence
v2.0 5.8 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.26% (percentile 83.2)
CWE: CWE-601 URL Redirection to Untrusted Site

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.