Read the docs

Wpmarketplace Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wpmarketplace Project records in CISA KEV

No Wpmarketplace Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpmarketplace 2 records HIGH

Records

2 records

TI-2014-07339 CVE-2014-9013 · GHSA-g2rw-4rqg-jqx5

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0…

Priority HIGH 68

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmp_pp_ajax_ca…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.45932 Published 2019-11-06 No fix listed CWE-20
TI-2014-07340 CVE-2014-9014 · GHSA-62vx-c83j-rc73

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php…

Priority LOW 34

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a ..

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.11584 Published 2019-11-06 No fix listed CWE-22
Open these records in search →