CVE-2014-4725

EPSS 59.7%

The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.

Affected products

n/a · n/a

public PoCs found — 2

githubgithub.com/AnotherSec/CVE-2014-4725★ 2 exploitdbwww.exploit-db.com/exploits/33991unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://arstechnica.com/security/2014/07/mass-exploit-of-wordpress-plugin-backdoors-sites-running-joomla-magento-too/http://blog.sucuri.net/2014/07/mailpoet-vulnerability-exploited-in-the-wild-breaking-thousands-of-wordpress-sites.html http://blog.sucuri.net/2014/07/malware-infection-breaking-wordpress-sites.html http://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html https://wordpress.org/plugins/wysija-newsletters/changelog/http://www.openwall.com/lists/oss-security/2014/07/08/7