CVE-2014-9014

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. (dot dot) in the file parameter.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

11.58% chance of exploitation in the next 30 days, 96th percentile

Published

2019-11-06

Updated

2024-08-06

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/36490
• https://www.exploit-db.com/exploits/36466

References

• CVE Record
• NVD entry

Related

• CVE-2014-9013
• CVE-2014-9016
• CVE-2014-9005
• CVE-2014-9017
• CVE-2014-9004
• CVE-2014-9031