CVE-2015-2673 EasyCart 1.1.30 - 3.0.20 - Privilege Escalation
HighCVSS 8.8
EPSS 18.9%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wpeasycart wp easycart | = 1.1.30 | No fix listed |
| wpeasycart wp easycart | = 1.1.31 | No fix listed |
| wpeasycart wp easycart | = 1.1.32 | No fix listed |
| wpeasycart wp easycart | = 1.1.33 | No fix listed |
| wpeasycart wp easycart | = 1.1.34 | No fix listed |
| wpeasycart wp easycart | = 1.1.35 | No fix listed |
| wpeasycart wp easycart | = 1.1.36 | No fix listed |
| wpeasycart wp easycart | = 1.2.0 | No fix listed |
| wpeasycart wp easycart | = 1.2.1 | No fix listed |
| wpeasycart wp easycart | = 1.2.2 | No fix listed |
| wpeasycart wp easycart | = 1.2.3 | No fix listed |
| wpeasycart wp easycart | = 1.2.4 | No fix listed |
| wpeasycart wp easycart | = 1.2.5 | No fix listed |
| wpeasycart wp easycart | = 1.2.6 | No fix listed |
| wpeasycart wp easycart | = 1.2.7 | No fix listed |
| wpeasycart wp easycart | = 1.2.8 | No fix listed |
| wpeasycart wp easycart | = 1.2.9 | No fix listed |
| wpeasycart wp easycart | = 1.2.10 | No fix listed |
| wpeasycart wp easycart | = 1.2.11 | No fix listed |
| wpeasycart wp easycart | = 1.2.12 | No fix listed |
| wpeasycart wp easycart | = 1.2.13 | No fix listed |
| wpeasycart wp easycart | = 1.2.14 | No fix listed |
| wpeasycart wp easycart | = 1.2.15 | No fix listed |
| wpeasycart wp easycart | = 1.2.16 | No fix listed |
| wpeasycart wp easycart | = 2.0.1 | No fix listed |
Show 81 more
| Product | Affected versions | Fixed in |
|---|---|---|
| wpeasycart wp easycart | = 2.0.1@824267 | No fix listed |
| wpeasycart wp easycart | = 2.0.2 | No fix listed |
| wpeasycart wp easycart | = 2.0.3 | No fix listed |
| wpeasycart wp easycart | = 2.0.4 | No fix listed |
| wpeasycart wp easycart | = 2.0.5 | No fix listed |
| wpeasycart wp easycart | = 2.0.6 | No fix listed |
| wpeasycart wp easycart | = 2.0.7 | No fix listed |
| wpeasycart wp easycart | = 2.0.8 | No fix listed |
| wpeasycart wp easycart | = 2.0.9 | No fix listed |
| wpeasycart wp easycart | = 2.0.10 | No fix listed |
| wpeasycart wp easycart | = 2.0.11 | No fix listed |
| wpeasycart wp easycart | = 2.0.12 | No fix listed |
| wpeasycart wp easycart | = 2.0.13 | No fix listed |
| wpeasycart wp easycart | = 2.0.14 | No fix listed |
| wpeasycart wp easycart | = 2.0.15 | No fix listed |
| wpeasycart wp easycart | = 2.0.16 | No fix listed |
| wpeasycart wp easycart | = 2.0.17 | No fix listed |
| wpeasycart wp easycart | = 2.0.18 | No fix listed |
| wpeasycart wp easycart | = 2.0.19 | No fix listed |
| wpeasycart wp easycart | = 2.0.20 | No fix listed |
| wpeasycart wp easycart | = 2.0.21 | No fix listed |
| wpeasycart wp easycart | = 2.0.22 | No fix listed |
| wpeasycart wp easycart | = 2.1.0 | No fix listed |
| wpeasycart wp easycart | = 2.1.1 | No fix listed |
| wpeasycart wp easycart | = 2.1.2 | No fix listed |
| wpeasycart wp easycart | = 2.1.3 | No fix listed |
| wpeasycart wp easycart | = 2.1.4 | No fix listed |
| wpeasycart wp easycart | = 2.1.5 | No fix listed |
| wpeasycart wp easycart | = 2.1.6 | No fix listed |
| wpeasycart wp easycart | = 2.1.7 | No fix listed |
| wpeasycart wp easycart | = 2.1.8 | No fix listed |
| wpeasycart wp easycart | = 2.1.9 | No fix listed |
| wpeasycart wp easycart | = 2.1.10 | No fix listed |
| wpeasycart wp easycart | = 2.1.11 | No fix listed |
| wpeasycart wp easycart | = 2.1.12 | No fix listed |
| wpeasycart wp easycart | = 2.1.13 | No fix listed |
| wpeasycart wp easycart | = 2.1.14 | No fix listed |
| wpeasycart wp easycart | = 2.1.15 | No fix listed |
| wpeasycart wp easycart | = 2.1.16 | No fix listed |
| wpeasycart wp easycart | = 2.1.17 | No fix listed |
| wpeasycart wp easycart | = 2.1.18 | No fix listed |
| wpeasycart wp easycart | = 2.1.19 | No fix listed |
| wpeasycart wp easycart | = 2.1.20 | No fix listed |
| wpeasycart wp easycart | = 2.1.21 | No fix listed |
| wpeasycart wp easycart | = 2.1.22 | No fix listed |
| wpeasycart wp easycart | = 2.1.23 | No fix listed |
| wpeasycart wp easycart | = 2.1.24 | No fix listed |
| wpeasycart wp easycart | = 2.1.25 | No fix listed |
| wpeasycart wp easycart | = 2.1.26 | No fix listed |
| wpeasycart wp easycart | = 2.1.27 | No fix listed |
| wpeasycart wp easycart | = 2.1.28 | No fix listed |
| wpeasycart wp easycart | = 2.1.29 | No fix listed |
| wpeasycart wp easycart | = 2.1.30 | No fix listed |
| wpeasycart wp easycart | = 2.1.31 | No fix listed |
| wpeasycart wp easycart | = 2.1.32 | No fix listed |
| wpeasycart wp easycart | = 2.1.33 | No fix listed |
| wpeasycart wp easycart | = 2.1.34 | No fix listed |
| wpeasycart wp easycart | = 2.1.35 | No fix listed |
| wpeasycart wp easycart | = 2.1.36 | No fix listed |
| wpeasycart wp easycart | = 3.0.0 | No fix listed |
| wpeasycart wp easycart | = 3.0.1 | No fix listed |
| wpeasycart wp easycart | = 3.0.2 | No fix listed |
| wpeasycart wp easycart | = 3.0.3 | No fix listed |
| wpeasycart wp easycart | = 3.0.4 | No fix listed |
| wpeasycart wp easycart | = 3.0.5 | No fix listed |
| wpeasycart wp easycart | = 3.0.6 | No fix listed |
| wpeasycart wp easycart | = 3.0.7 | No fix listed |
| wpeasycart wp easycart | = 3.0.8 | No fix listed |
| wpeasycart wp easycart | = 3.0.9 | No fix listed |
| wpeasycart wp easycart | = 3.0.10 | No fix listed |
| wpeasycart wp easycart | = 3.0.11 | No fix listed |
| wpeasycart wp easycart | = 3.0.12 | No fix listed |
| wpeasycart wp easycart | = 3.0.13 | No fix listed |
| wpeasycart wp easycart | = 3.0.14 | No fix listed |
| wpeasycart wp easycart | = 3.0.15 | No fix listed |
| wpeasycart wp easycart | = 3.0.16 | No fix listed |
| wpeasycart wp easycart | = 3.0.17 | No fix listed |
| wpeasycart wp easycart | = 3.0.18 | No fix listed |
| wpeasycart wp easycart | = 3.0.19 | No fix listed |
| wpeasycart wp easycart | = 3.0.20 | No fix listed |
| wordpress wp-easycart(WordPress) | >= 1.1.30, < 3.0.21 | 3.0.21 |
References
- blog.rastating.com exploit third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org