2014-07-26

2014-07-27

2014-07-28

All (2) High (2)

CVE-2014-4725 Jul 27, 18:55 HIGH POC PATCH THREAT Act Now

The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.8%.

PHP WordPress Authentication Bypass Mailpoet Wordpress Plugin +1

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

81.8%

Threat

5.5

CVE-2014-4726 Jul 27, 18:55 HIGH PATCH This Week

Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and attack vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

WordPress Information Disclosure Mailpoet Wordpress Plugin Mailpoet Newsletters

NVD

CVSS 2.0

7.5

EPSS

0.4%