CVE-2014-4942

Published: Jul 11, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The EasyCart (wp-easycart) plugin before 2.0.6 for WordPress allows remote attackers to obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function.

Affected (5)

Products: Levelfourdevelopment: Wp Easycart

Levelfourdevelopment

1 product

Wp Easycart

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Levelfourdevelopment Wp Easycart	Up to 2.0.5
Levelfourdevelopment Wp Easycart	Version 2.0.1
Levelfourdevelopment Wp Easycart	Version 2.0.2
Levelfourdevelopment Wp Easycart	Version 2.0.3
Levelfourdevelopment Wp Easycart	Version 2.0.4