CVE-2014-4725
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 60%
from disclosure to weapon0 days
Published on NVDJul 27
1st PoCJul 7
metasploitJul 1
VulnCheck+3053d
exploitation probability
60%top 1% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.
Affected products
n/a · n/apublic PoCs found — 3
githubgithub.com/AnotherSec/CVE-2014-4725★ 2exploitdbwww.exploit-db.com/exploits/33991unverifiedvulncheckvulncheck.com/xdb/5f53633e0617unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://arstechnica.com/security/2014/07/mass-exploit-of-wordpress-plugin-backdoors-sites-running-joomla-magento-too/http://blog.sucuri.net/2014/07/mailpoet-vulnerability-exploited-in-the-wild-breaking-thousands-of-wordpress-sites.htmlhttp://blog.sucuri.net/2014/07/malware-infection-breaking-wordpress-sites.htmlhttp://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.htmlhttps://wordpress.org/plugins/wysija-newsletters/changelog/http://www.openwall.com/lists/oss-security/2014/07/08/7