CVE-2015-2673 (GCVE-0-2015-2673)
Vulnerability from cvelistv5 – Published: 2017-10-06 22:00 – Updated: 2024-08-06 05:24
VLAI
EPSS
VEX
Summary
The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.
Severity
8.8 (High)
CWE
- n/a
Assigner
References
1 reference
| URL | Tags |
|---|---|
| http://blog.rastating.com/wp-easycart-privilege-e… | x_refsource_MISC |
Date Public
2015-02-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T05:24:38.401Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-02-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-10-09T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2015-2673",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/",
"refsource": "MISC",
"url": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2015-2673",
"datePublished": "2017-10-06T22:00:00.000Z",
"dateReserved": "2015-03-23T00:00:00.000Z",
"dateUpdated": "2024-08-06T05:24:38.401Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2015-2673",
"date": "2026-10-03",
"epss": "0.18932",
"percentile": "0.97223"
},
"fkie_nvd": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.30:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4487C83C-8C47-403C-AA92-BF76BB713AC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.31:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "F8C7F40B-384D-4BA1-8395-8169ADD2B15D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.32:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "BF2337EE-D7BC-4849-8557-FF00D7098369",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.33:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "70045986-BD4B-4664-A273-04B2B62E80DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.34:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "76FDFD93-E825-45D3-BF54-80B907C47AC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.35:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "02E41D7E-8D43-4585-8D75-D376FC1291E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.36:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0931F7E7-E651-4127-BDFE-8668C03B00BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E0D178F1-32B8-4195-B0C2-6CB7011C65FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4E6FE01F-E50D-4EC3-813F-28D9DCF4B034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "91C4AFDA-5A51-4DB4-B67B-A28B2E005D0F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CFF6482F-9323-4EA2-AF2D-A023FF067167",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "434C1693-E249-43C1-AE21-2E5670883585",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CB46188F-C271-4C2B-9B91-56420D3E534E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "5CFF7FE7-5B4B-4DB2-A30F-78919A270CBB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9D2F76E9-C38F-446E-933C-516777DFE3CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "83123C36-D1BB-4808-9AC5-42E4BF72CA89",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "102BBE09-B316-412D-A423-5F80AA0F8607",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A94A31D7-3F33-4CF4-8D9D-3FD06E3B2747",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "BC6AD11F-E432-4780-B376-30500471B78E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8D1FA1A5-08B1-4E7B-AF4D-F1A5E1CB1356",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "823DDF37-7E98-489A-AE1B-C5309B11BDD7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "DBDB700D-780B-4938-B10F-44BA9F5E73E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B7C153B8-54E3-4EE2-968D-BE8679B54E7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1CFFD414-B289-43B4-9C6D-B180275B73C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "14E7D42E-7F3F-4B55-8E1B-EB52D1ECC4B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.1\\@824267:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A0B706B5-549A-4DE9-B770-B40F5965259F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "AE5FBE51-B439-41DB-A63F-16F583BC4EEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "26205865-5730-4F14-AFF2-E886AD31B382",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C06F54D1-B04B-40F0-AD4A-7894B950D953",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "308EBBC1-FF7F-4B36-99BC-759A1E59AC59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "BBD360CE-6AC6-4229-8C86-B3417447E431",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E51D242F-6116-4C57-9CB3-3D411C54475E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "52223DAD-DDDF-4548-8BF6-72B63AEDA034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C09A2D67-C750-4477-B0AC-4052A45638DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "86AD394E-8CD4-4C91-8008-C947C15A8521",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9559EA63-8C84-463D-BB3A-C49FC996AD93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "56A994AE-5DF8-41B2-A567-978F71BCDDC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8A87B5CA-912A-4E28-BD08-E4DF30AA0DF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "6CD014CA-A922-44AE-B67E-01BD3715C5E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "FE9CDF60-3D48-43E1-B341-C74C4D3C5A98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "46866A37-6FC8-4141-8C68-62FCDC281031",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.17:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0DE115C7-83C4-4CC0-B7E6-D3329869D7CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.18:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "57B54C1B-DBCB-48BB-9494-938CED11D913",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.19:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "441E6707-1E14-4C4B-B5C0-14969CB65385",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.20:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "11587E57-47CE-42E5-8212-0F839AD5FBBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.21:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0CED4BCE-6462-4D3F-B7FC-E9C39EAA82CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.22:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1AC9ED3E-C9DD-4E47-ACD2-4EFCC9911DFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "54169A5A-ED6E-4901-AA45-0486ACE5EF7F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8D89B86B-77F5-42B1-BB71-4C439A992956",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0C317AA6-E446-4A30-BF27-C10D2CCA9047",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D6E31C68-D76E-4154-A7B7-B7C1217D06AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8417E1BA-F5AB-4AE3-9E66-4E0A24A709A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1157B92A-2937-4DFA-81DB-5DF57290FD21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "7D17E334-688F-470E-8C5B-953BC4179F61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C82F09A5-9307-4806-9DDF-6BE75F94BE64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D5479CF8-E46F-4C02-9504-7CA0F751C9A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "3D144CC0-F0AE-4FCC-AD36-1EF659521F54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "3A69B29C-FF7A-4447-8287-C3AEC2B26EE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D45D1B03-C288-4587-8E87-973B6F954952",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "44C4FFC8-72E5-41CA-8E9C-90B40AF38EF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "92078833-B796-46C6-8DD0-B1004910A45D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "865B39D6-7DB7-4380-BB5A-47A04E038C16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "F1354C59-3573-42A9-BD4D-F300F4B90D28",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "07C5329B-494A-42C9-897C-9BDB02FAE265",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.17:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D90408D0-7FE1-4525-90D5-C51951F269D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.18:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "43A33C3E-93B7-44A9-99ED-47712D2D0276",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.19:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "ECDCFD9B-0C0F-4458-B805-63770CF35E50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.20:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C82F4AA5-9551-48EF-B6E3-5F71E2CF4283",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.21:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "27E6CFF3-4FF6-46E9-873D-2B309D7E92B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.22:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CB869FEA-8D2C-4405-A1FA-76068448D0BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.23:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8B52E3AC-89BE-45BC-BF49-2EC30CBF5CB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.24:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "18A035A1-5F85-49E8-B123-B38ED721FE66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.25:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A778FFA8-3015-4621-BB0D-D48D3DC5CE29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.26:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "871120E5-DA7B-4A80-B61F-77B033756AA2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.27:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4599DC86-B3FB-457E-8407-57349F08698C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.28:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B3CBF969-8CCF-470D-94E9-F71734DB7C14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.29:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "401AF261-ECA1-4D2E-AEF7-F626138FD546",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.30:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C0C1CDE3-21D1-44B9-9596-32A1B89D8105",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.31:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C59481E3-9F3C-4ED5-BA37-92CCC48CF4DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.32:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1C3B3162-21A3-46E6-BF37-39BBC781D18F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.33:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "5255BA79-6490-4069-B4CE-07A02510FE31",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.34:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9BF95BE9-36EB-4E56-B8DA-F2DAB9D399F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.35:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C9FBD7B5-51EC-46E4-80A5-FCAC85FD13EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.36:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1313BD18-0880-4099-962A-A09650D6980F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "81092DEA-39F6-4405-A4D9-DB53C88B4437",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E87A5A66-4AB1-4D10-A7ED-B41DF033F007",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "052B2164-0FA4-484C-BFDD-2D4C9344AB50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "7B4F4125-8D1C-49BA-88FB-90D827ED8673",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "2C09B121-0D79-4DE5-B6AB-AD110E616412",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "86C0C8BD-D6C3-41BF-A2B0-F9E8B50FF520",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "682648C4-8F0D-46A8-A425-3835D5039916",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "298AED62-362B-441E-BFCB-5BBB00E8B719",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C571B408-3DA8-46A1-8EC0-2720604F6B26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B8B4493E-F0E3-4F9D-B473-422333698EAB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8905C98B-B282-4175-A133-E55520BFC018",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1A1D72CF-BAC7-4248-9389-74BB2B4209F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C8B46D52-5508-413D-9C7B-28991FC87457",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "296965EE-356D-40C6-9CC3-D37BED387931",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "6D61E803-BD0C-4834-BD3F-37CFF4701050",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8C1B2AF4-CBD1-4701-A998-3F28EE090616",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9D0D9100-474F-42B6-AB15-565A2A27F53B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.17:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "6267A653-57D1-47F4-B035-2CEFCE43F44C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.18:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B248C90A-125E-4EF4-9A57-E3F21739E1AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.19:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "666D7FB8-CFAB-4175-A5FF-505D8253CB4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.20:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "26DBE285-55DF-4316-AEEC-782DD14C7379",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters."
},
{
"lang": "es",
"value": "Las funciones ec_ajax_update_option y ec_ajax_clear_all_taxrates en inc/admin/admin_ajax_functions.php en el plugin WP EasyCart desde la versi\u00f3n 1.1.30 hasta la 3.0.20 para WordPress permiten que atacantes remotos obtengan privilegios de administrador y ejecuten c\u00f3digo arbitrario mediante los par\u00e1metros option_name y option_value."
}
],
"id": "CVE-2015-2673",
"lastModified": "2024-11-21T02:27:49.377",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2017-10-06T22:29:00.633",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.30:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4487C83C-8C47-403C-AA92-BF76BB713AC9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.31:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "F8C7F40B-384D-4BA1-8395-8169ADD2B15D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.32:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "BF2337EE-D7BC-4849-8557-FF00D7098369",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.33:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "70045986-BD4B-4664-A273-04B2B62E80DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.34:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "76FDFD93-E825-45D3-BF54-80B907C47AC4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.35:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "02E41D7E-8D43-4585-8D75-D376FC1291E6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.1.36:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0931F7E7-E651-4127-BDFE-8668C03B00BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E0D178F1-32B8-4195-B0C2-6CB7011C65FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4E6FE01F-E50D-4EC3-813F-28D9DCF4B034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "91C4AFDA-5A51-4DB4-B67B-A28B2E005D0F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CFF6482F-9323-4EA2-AF2D-A023FF067167",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "434C1693-E249-43C1-AE21-2E5670883585",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CB46188F-C271-4C2B-9B91-56420D3E534E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "5CFF7FE7-5B4B-4DB2-A30F-78919A270CBB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9D2F76E9-C38F-446E-933C-516777DFE3CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "83123C36-D1BB-4808-9AC5-42E4BF72CA89",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "102BBE09-B316-412D-A423-5F80AA0F8607",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A94A31D7-3F33-4CF4-8D9D-3FD06E3B2747",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "BC6AD11F-E432-4780-B376-30500471B78E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8D1FA1A5-08B1-4E7B-AF4D-F1A5E1CB1356",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "823DDF37-7E98-489A-AE1B-C5309B11BDD7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "DBDB700D-780B-4938-B10F-44BA9F5E73E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B7C153B8-54E3-4EE2-968D-BE8679B54E7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:1.2.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1CFFD414-B289-43B4-9C6D-B180275B73C5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "14E7D42E-7F3F-4B55-8E1B-EB52D1ECC4B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.1\\@824267:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A0B706B5-549A-4DE9-B770-B40F5965259F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "AE5FBE51-B439-41DB-A63F-16F583BC4EEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "26205865-5730-4F14-AFF2-E886AD31B382",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C06F54D1-B04B-40F0-AD4A-7894B950D953",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "308EBBC1-FF7F-4B36-99BC-759A1E59AC59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "BBD360CE-6AC6-4229-8C86-B3417447E431",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E51D242F-6116-4C57-9CB3-3D411C54475E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "52223DAD-DDDF-4548-8BF6-72B63AEDA034",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C09A2D67-C750-4477-B0AC-4052A45638DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "86AD394E-8CD4-4C91-8008-C947C15A8521",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9559EA63-8C84-463D-BB3A-C49FC996AD93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "56A994AE-5DF8-41B2-A567-978F71BCDDC8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8A87B5CA-912A-4E28-BD08-E4DF30AA0DF9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "6CD014CA-A922-44AE-B67E-01BD3715C5E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "FE9CDF60-3D48-43E1-B341-C74C4D3C5A98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "46866A37-6FC8-4141-8C68-62FCDC281031",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.17:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0DE115C7-83C4-4CC0-B7E6-D3329869D7CC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.18:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "57B54C1B-DBCB-48BB-9494-938CED11D913",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.19:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "441E6707-1E14-4C4B-B5C0-14969CB65385",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.20:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "11587E57-47CE-42E5-8212-0F839AD5FBBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.21:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0CED4BCE-6462-4D3F-B7FC-E9C39EAA82CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.0.22:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1AC9ED3E-C9DD-4E47-ACD2-4EFCC9911DFF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "54169A5A-ED6E-4901-AA45-0486ACE5EF7F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8D89B86B-77F5-42B1-BB71-4C439A992956",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "0C317AA6-E446-4A30-BF27-C10D2CCA9047",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D6E31C68-D76E-4154-A7B7-B7C1217D06AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8417E1BA-F5AB-4AE3-9E66-4E0A24A709A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1157B92A-2937-4DFA-81DB-5DF57290FD21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "7D17E334-688F-470E-8C5B-953BC4179F61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C82F09A5-9307-4806-9DDF-6BE75F94BE64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D5479CF8-E46F-4C02-9504-7CA0F751C9A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "3D144CC0-F0AE-4FCC-AD36-1EF659521F54",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "3A69B29C-FF7A-4447-8287-C3AEC2B26EE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D45D1B03-C288-4587-8E87-973B6F954952",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "44C4FFC8-72E5-41CA-8E9C-90B40AF38EF7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "92078833-B796-46C6-8DD0-B1004910A45D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "865B39D6-7DB7-4380-BB5A-47A04E038C16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "F1354C59-3573-42A9-BD4D-F300F4B90D28",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "07C5329B-494A-42C9-897C-9BDB02FAE265",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.17:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "D90408D0-7FE1-4525-90D5-C51951F269D5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.18:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "43A33C3E-93B7-44A9-99ED-47712D2D0276",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.19:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "ECDCFD9B-0C0F-4458-B805-63770CF35E50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.20:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C82F4AA5-9551-48EF-B6E3-5F71E2CF4283",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.21:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "27E6CFF3-4FF6-46E9-873D-2B309D7E92B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.22:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "CB869FEA-8D2C-4405-A1FA-76068448D0BC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.23:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8B52E3AC-89BE-45BC-BF49-2EC30CBF5CB0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.24:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "18A035A1-5F85-49E8-B123-B38ED721FE66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.25:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "A778FFA8-3015-4621-BB0D-D48D3DC5CE29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.26:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "871120E5-DA7B-4A80-B61F-77B033756AA2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.27:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "4599DC86-B3FB-457E-8407-57349F08698C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.28:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B3CBF969-8CCF-470D-94E9-F71734DB7C14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.29:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "401AF261-ECA1-4D2E-AEF7-F626138FD546",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.30:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C0C1CDE3-21D1-44B9-9596-32A1B89D8105",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.31:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C59481E3-9F3C-4ED5-BA37-92CCC48CF4DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.32:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1C3B3162-21A3-46E6-BF37-39BBC781D18F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.33:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "5255BA79-6490-4069-B4CE-07A02510FE31",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.34:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9BF95BE9-36EB-4E56-B8DA-F2DAB9D399F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.35:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C9FBD7B5-51EC-46E4-80A5-FCAC85FD13EF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:2.1.36:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1313BD18-0880-4099-962A-A09650D6980F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.0:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "81092DEA-39F6-4405-A4D9-DB53C88B4437",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.1:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "E87A5A66-4AB1-4D10-A7ED-B41DF033F007",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.2:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "052B2164-0FA4-484C-BFDD-2D4C9344AB50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.3:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "7B4F4125-8D1C-49BA-88FB-90D827ED8673",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.4:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "2C09B121-0D79-4DE5-B6AB-AD110E616412",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.5:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "86C0C8BD-D6C3-41BF-A2B0-F9E8B50FF520",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.6:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "682648C4-8F0D-46A8-A425-3835D5039916",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.7:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "298AED62-362B-441E-BFCB-5BBB00E8B719",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.8:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C571B408-3DA8-46A1-8EC0-2720604F6B26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.9:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B8B4493E-F0E3-4F9D-B473-422333698EAB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.10:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8905C98B-B282-4175-A133-E55520BFC018",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.11:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "1A1D72CF-BAC7-4248-9389-74BB2B4209F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.12:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "C8B46D52-5508-413D-9C7B-28991FC87457",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.13:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "296965EE-356D-40C6-9CC3-D37BED387931",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.14:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "6D61E803-BD0C-4834-BD3F-37CFF4701050",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.15:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "8C1B2AF4-CBD1-4701-A998-3F28EE090616",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.16:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "9D0D9100-474F-42B6-AB15-565A2A27F53B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.17:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "6267A653-57D1-47F4-B035-2CEFCE43F44C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.18:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "B248C90A-125E-4EF4-9A57-E3F21739E1AE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.19:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "666D7FB8-CFAB-4175-A5FF-505D8253CB4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:wpeasycart:wp_easycart:3.0.20:*:*:*:*:wordpress:*:*",
"matchCriteriaId": "26DBE285-55DF-4316-AEEC-782DD14C7379",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters."
},
{
"lang": "es",
"value": "Las funciones ec_ajax_update_option y ec_ajax_clear_all_taxrates en inc/admin/admin_ajax_functions.php en el plugin WP EasyCart desde la versi\u00f3n 1.1.30 hasta la 3.0.20 para WordPress permiten que atacantes remotos obtengan privilegios de administrador y ejecuten c\u00f3digo arbitrario mediante los par\u00e1metros option_name y option_value."
}
],
"id": "CVE-2015-2673",
"lastModified": "2026-05-13T00:24:29.033",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.5,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2017-10-06T22:29:00.633",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-264"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…