blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2014-4942

MEDIUM 5.0 CVSS 2.0
Published
July 11, 2014
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-200
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function.

Affected WordPress components

  • Shopping Cart & eCommerce Store Plugin · wp-easycart
    Confirmed match Active
    Version 2.0.3; Version 2.0.4; Up to and including 2.0.5; Version 2.0.1; Version 2.0.2
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • n/a n/a — Versions not specified
  • levelfourdevelopment wp-easycart — Up to and including 2.0.5
  • levelfourdevelopment wp-easycart — Version 2.0.1
  • levelfourdevelopment wp-easycart — Version 2.0.2
  • levelfourdevelopment wp-easycart — Version 2.0.3
  • levelfourdevelopment wp-easycart — Version 2.0.4

References

  • codevigilant.com http://codevigilant.com/disclosure/wp-plugin-wp-easycart-information-disclosure/ Exploit
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=829290%40wp-easycart&old=827627%40wp-easycart&sfp_email=&sfph_mail= Patch
  • nvd.nist.gov Official NVD record