blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2015-2673

HIGH 8.8 CVSS 3.0
Published
October 6, 2017
Last modified
June 17, 2026
NVD status
Modified
Reported by
cve@mitre.org
Weakness
CWE-264
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.

Affected products and versions

  • n/a n/a — Versions not specified
  • wpeasycart wp_easycart — Version 1.1.30
  • wpeasycart wp_easycart — Version 1.1.31
  • wpeasycart wp_easycart — Version 1.1.32
  • wpeasycart wp_easycart — Version 1.1.33
  • wpeasycart wp_easycart — Version 1.1.34
  • wpeasycart wp_easycart — Version 1.1.35
  • wpeasycart wp_easycart — Version 1.1.36
  • wpeasycart wp_easycart — Version 1.2.0
  • wpeasycart wp_easycart — Version 1.2.1
  • wpeasycart wp_easycart — Version 1.2.2
  • wpeasycart wp_easycart — Version 1.2.3
  • wpeasycart wp_easycart — Version 1.2.4
  • wpeasycart wp_easycart — Version 1.2.5
  • wpeasycart wp_easycart — Version 1.2.6
  • wpeasycart wp_easycart — Version 1.2.7
  • wpeasycart wp_easycart — Version 1.2.8
  • wpeasycart wp_easycart — Version 1.2.9
  • wpeasycart wp_easycart — Version 1.2.10
  • wpeasycart wp_easycart — Version 1.2.11
  • wpeasycart wp_easycart — Version 1.2.12
  • wpeasycart wp_easycart — Version 1.2.13
  • wpeasycart wp_easycart — Version 1.2.14
  • wpeasycart wp_easycart — Version 1.2.15
  • wpeasycart wp_easycart — Version 1.2.16
  • wpeasycart wp_easycart — Version 2.0.1
  • wpeasycart wp_easycart — Version 2.0.1\@824267
  • wpeasycart wp_easycart — Version 2.0.2
  • wpeasycart wp_easycart — Version 2.0.3
  • wpeasycart wp_easycart — Version 2.0.4
  • wpeasycart wp_easycart — Version 2.0.5
  • wpeasycart wp_easycart — Version 2.0.6
  • wpeasycart wp_easycart — Version 2.0.7
  • wpeasycart wp_easycart — Version 2.0.8
  • wpeasycart wp_easycart — Version 2.0.9
  • wpeasycart wp_easycart — Version 2.0.10
  • wpeasycart wp_easycart — Version 2.0.11
  • wpeasycart wp_easycart — Version 2.0.12
  • wpeasycart wp_easycart — Version 2.0.13
  • wpeasycart wp_easycart — Version 2.0.14
  • wpeasycart wp_easycart — Version 2.0.15
  • wpeasycart wp_easycart — Version 2.0.16
  • wpeasycart wp_easycart — Version 2.0.17
  • wpeasycart wp_easycart — Version 2.0.18
  • wpeasycart wp_easycart — Version 2.0.19
  • wpeasycart wp_easycart — Version 2.0.20
  • wpeasycart wp_easycart — Version 2.0.21
  • wpeasycart wp_easycart — Version 2.0.22
  • wpeasycart wp_easycart — Version 2.1.0
  • wpeasycart wp_easycart — Version 2.1.1
  • wpeasycart wp_easycart — Version 2.1.2
  • wpeasycart wp_easycart — Version 2.1.3
  • wpeasycart wp_easycart — Version 2.1.4
  • wpeasycart wp_easycart — Version 2.1.5
  • wpeasycart wp_easycart — Version 2.1.6
  • wpeasycart wp_easycart — Version 2.1.7
  • wpeasycart wp_easycart — Version 2.1.8
  • wpeasycart wp_easycart — Version 2.1.9
  • wpeasycart wp_easycart — Version 2.1.10
  • wpeasycart wp_easycart — Version 2.1.11
  • wpeasycart wp_easycart — Version 2.1.12
  • wpeasycart wp_easycart — Version 2.1.13
  • wpeasycart wp_easycart — Version 2.1.14
  • wpeasycart wp_easycart — Version 2.1.15
  • wpeasycart wp_easycart — Version 2.1.16
  • wpeasycart wp_easycart — Version 2.1.17
  • wpeasycart wp_easycart — Version 2.1.18
  • wpeasycart wp_easycart — Version 2.1.19
  • wpeasycart wp_easycart — Version 2.1.20
  • wpeasycart wp_easycart — Version 2.1.21
  • wpeasycart wp_easycart — Version 2.1.22
  • wpeasycart wp_easycart — Version 2.1.23
  • wpeasycart wp_easycart — Version 2.1.24
  • wpeasycart wp_easycart — Version 2.1.25
  • wpeasycart wp_easycart — Version 2.1.26
  • wpeasycart wp_easycart — Version 2.1.27
  • wpeasycart wp_easycart — Version 2.1.28
  • wpeasycart wp_easycart — Version 2.1.29
  • wpeasycart wp_easycart — Version 2.1.30
  • wpeasycart wp_easycart — Version 2.1.31
  • wpeasycart wp_easycart — Version 2.1.32
  • wpeasycart wp_easycart — Version 2.1.33
  • wpeasycart wp_easycart — Version 2.1.34
  • wpeasycart wp_easycart — Version 2.1.35
  • wpeasycart wp_easycart — Version 2.1.36
  • wpeasycart wp_easycart — Version 3.0.0
  • wpeasycart wp_easycart — Version 3.0.1
  • wpeasycart wp_easycart — Version 3.0.2
  • wpeasycart wp_easycart — Version 3.0.3
  • wpeasycart wp_easycart — Version 3.0.4
  • wpeasycart wp_easycart — Version 3.0.5
  • wpeasycart wp_easycart — Version 3.0.6
  • wpeasycart wp_easycart — Version 3.0.7
  • wpeasycart wp_easycart — Version 3.0.8
  • wpeasycart wp_easycart — Version 3.0.9
  • wpeasycart wp_easycart — Version 3.0.10
  • wpeasycart wp_easycart — Version 3.0.11
  • wpeasycart wp_easycart — Version 3.0.12
  • wpeasycart wp_easycart — Version 3.0.13
  • wpeasycart wp_easycart — Version 3.0.14
  • wpeasycart wp_easycart — Version 3.0.15
  • wpeasycart wp_easycart — Version 3.0.16
  • wpeasycart wp_easycart — Version 3.0.17
  • wpeasycart wp_easycart — Version 3.0.18
  • wpeasycart wp_easycart — Version 3.0.19
  • wpeasycart wp_easycart — Version 3.0.20

References

  • blog.rastating.com http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/ Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record