CVE-2014-9260
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 11%
from disclosure to weapon0 days
Published on NVDAug 7
1st PoCNov 24
exploitation probability
11%top 5% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/36301unverifiedcve_referencepacketstormsecurity.com/files/130690/WordPress-Download-Manager-2.7.2-Privilege-Escalation.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.