CVE-2014-9014

medium · 4.3

Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. (dot dot) in the file parameter.

4.3

CVSS

11.6%

EPSS (exploit prob.)

96th

EPSS percentile

2019-11-06

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
wpmarketplace_project	wpmarketplace	2.4.0

Check a specific version with /api/v1/cve/match.

References

https://security.szurek.pl/wp-marketplace-240-arbitrary-file-download.html
https://www.exploit-db.com/exploits/36466/
https://security.szurek.pl/wp-marketplace-240-arbitrary-file-download.html
https://www.exploit-db.com/exploits/36466/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-9014