Vulnerability Details CVE-2014-9014
Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. (dot dot) in the file parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.052
EPSS Ranking 89.6%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
References
Products affected by CVE-2014-9014
-
cpe:2.3:a:wpmarketplace_project:wpmarketplace:2.4.0