Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wpmarketplace Project Component: Wpmarketplace Clear all filters
TI-2014-07339 CVE-2014-9013 · GHSA-g2rw-4rqg-jqx5

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0…

Priority HIGH 68

The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows remote authenticated users to create arbitrary users and gain admin privileges via a request to wpmp_pp_ajax_ca…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.45932 Published 2019-11-06 No fix listed CWE-20
TI-2014-07340 CVE-2014-9014 · GHSA-62vx-c83j-rc73

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php…

Priority LOW 34

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a ..

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.11584 Published 2019-11-06 No fix listed CWE-22