{"vulnerability": "cve-2014-4725", "sightings": [{"uuid": "e1d573e0-92cb-4e62-a7d8-a965f0579843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4725", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "a0554b5f-cecb-49de-840f-3b82ebb84cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4725", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwmrsaibxy2c", "content": "", "creation_timestamp": "2025-08-17T21:02:24.054610Z"}, {"uuid": "24d0244a-b984-44eb-b1fe-2a494a1977d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4725", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_wysija_newsletters_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "2ea07485-4ac3-4922-ba2a-ca33e1964e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2014-4725", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/33991", "content": "", "creation_timestamp": "2014-07-07T00:00:00.000000Z"}, {"uuid": "7f6e6a80-3820-4517-afd5-b3eb523ab81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4725", "type": "published-proof-of-concept", "source": "Telegram/fC8PfCiry9OIUACnKdh6W-ZD6kYVir-pVoNQ53Rr4jm6V_0", "content": "", "creation_timestamp": "2025-08-15T09:00:04.000000Z"}, {"uuid": "9fb6a867-d35a-439f-b507-53d804112f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4725", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wp_wysija_newsletters_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Marc-Alexandre Montpas\", \"Christian Mehlmauer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The Wordpress plugin \\\"MailPoet Newsletters\\\" (wysija-newsletters) before 2.6.8\\n          is vulnerable to an unauthenticated file upload. The exploit uses the Upload Theme\\n          functionality to upload a zip file containing the payload. The plugin uses the\\n          admin_init hook, which is also executed for unauthenticated users when accessing\\n          a specific URL. The first fix for this vulnerability appeared in version 2.6.7,\\n          but the fix can be bypassed. In PHP's default configuration,\\n          a POST variable overwrites a GET variable in the $_REQUEST array. The plugin\\n          uses $_REQUEST to check for access rights. By setting the POST parameter to\\n          something not beginning with 'wysija_', the check is bypassed. Wordpress uses\\n          the $_GET array to determine the page, so it is not affected by this. The developers\\n          applied the fixes to all previous versions too.\", \"disclosure_date\": \"2014-07-01\", \"fullname\": \"exploit/unix/webapp/wp_wysija_newsletters_upload\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Wordpress MailPoet Newsletters (wysija-newsletters) Unauthenticated File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/wp_wysija_newsletters_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/wp_wysija_newsletters_upload\", \"references\": [\"CVE-2014-4725\", \"URL-http://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html\", \"URL-http://www.mailpoet.com/security-update-part-2/\", \"URL-https://plugins.trac.wordpress.org/changeset/943427/wysija-newsletters/trunk/helpers/back.php\", \"WPVDB-6680\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"wysija-newsletters < 2.6.8\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:52.507143Z"}]}