CVE-2015-2673

Published: Oct 6, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyCart plugin 1.1.30 through 3.0.20 for WordPress allow remote attackers to gain administrator privileges and execute arbitrary code via the option_name and option_value parameters.

Affected (105)

Products: Wpeasycart: Wp Easycart

Wpeasycart

1 product

Wp Easycart

Configuration A

105 vulnerable

Vulnerable Software	Affected Versions
Wpeasycart Wp Easycart	Version 1.1.30
Wpeasycart Wp Easycart	Version 1.1.31
Wpeasycart Wp Easycart	Version 1.1.32
Wpeasycart Wp Easycart	Version 1.1.33
Wpeasycart Wp Easycart	Version 1.1.34
Wpeasycart Wp Easycart	Version 1.1.35
Wpeasycart Wp Easycart	Version 1.1.36
Wpeasycart Wp Easycart	Version 1.2.0
Wpeasycart Wp Easycart	Version 1.2.10
Wpeasycart Wp Easycart	Version 1.2.11
Wpeasycart Wp Easycart	Version 1.2.12
Wpeasycart Wp Easycart	Version 1.2.13
Wpeasycart Wp Easycart	Version 1.2.14
Wpeasycart Wp Easycart	Version 1.2.15
Wpeasycart Wp Easycart	Version 1.2.16
Wpeasycart Wp Easycart	Version 1.2.1
Wpeasycart Wp Easycart	Version 1.2.2
Wpeasycart Wp Easycart	Version 1.2.3
Wpeasycart Wp Easycart	Version 1.2.4
Wpeasycart Wp Easycart	Version 1.2.5
Wpeasycart Wp Easycart	Version 1.2.6
Wpeasycart Wp Easycart	Version 1.2.7
Wpeasycart Wp Easycart	Version 1.2.8
Wpeasycart Wp Easycart	Version 1.2.9
Wpeasycart Wp Easycart	Version 2.0.10
Wpeasycart Wp Easycart	Version 2.0.11
Wpeasycart Wp Easycart	Version 2.0.12
Wpeasycart Wp Easycart	Version 2.0.13
Wpeasycart Wp Easycart	Version 2.0.14
Wpeasycart Wp Easycart	Version 2.0.15
Wpeasycart Wp Easycart	Version 2.0.16
Wpeasycart Wp Easycart	Version 2.0.17
Wpeasycart Wp Easycart	Version 2.0.18
Wpeasycart Wp Easycart	Version 2.0.19
Wpeasycart Wp Easycart	Version 2.0.1
Wpeasycart Wp Easycart	Version 2.0.1@824267
Wpeasycart Wp Easycart	Version 2.0.20
Wpeasycart Wp Easycart	Version 2.0.21
Wpeasycart Wp Easycart	Version 2.0.22
Wpeasycart Wp Easycart	Version 2.0.2
Wpeasycart Wp Easycart	Version 2.0.3
Wpeasycart Wp Easycart	Version 2.0.4
Wpeasycart Wp Easycart	Version 2.0.5
Wpeasycart Wp Easycart	Version 2.0.6
Wpeasycart Wp Easycart	Version 2.0.7
Wpeasycart Wp Easycart	Version 2.0.8
Wpeasycart Wp Easycart	Version 2.0.9
Wpeasycart Wp Easycart	Version 2.1.0
Wpeasycart Wp Easycart	Version 2.1.10
Wpeasycart Wp Easycart	Version 2.1.11
Wpeasycart Wp Easycart	Version 2.1.12
Wpeasycart Wp Easycart	Version 2.1.13
Wpeasycart Wp Easycart	Version 2.1.14
Wpeasycart Wp Easycart	Version 2.1.15
Wpeasycart Wp Easycart	Version 2.1.16
Wpeasycart Wp Easycart	Version 2.1.17
Wpeasycart Wp Easycart	Version 2.1.18
Wpeasycart Wp Easycart	Version 2.1.19
Wpeasycart Wp Easycart	Version 2.1.1
Wpeasycart Wp Easycart	Version 2.1.20
Wpeasycart Wp Easycart	Version 2.1.21
Wpeasycart Wp Easycart	Version 2.1.22
Wpeasycart Wp Easycart	Version 2.1.23
Wpeasycart Wp Easycart	Version 2.1.24
Wpeasycart Wp Easycart	Version 2.1.25
Wpeasycart Wp Easycart	Version 2.1.26
Wpeasycart Wp Easycart	Version 2.1.27
Wpeasycart Wp Easycart	Version 2.1.28
Wpeasycart Wp Easycart	Version 2.1.29
Wpeasycart Wp Easycart	Version 2.1.2
Wpeasycart Wp Easycart	Version 2.1.30
Wpeasycart Wp Easycart	Version 2.1.31
Wpeasycart Wp Easycart	Version 2.1.32
Wpeasycart Wp Easycart	Version 2.1.33
Wpeasycart Wp Easycart	Version 2.1.34
Wpeasycart Wp Easycart	Version 2.1.35
Wpeasycart Wp Easycart	Version 2.1.36
Wpeasycart Wp Easycart	Version 2.1.3
Wpeasycart Wp Easycart	Version 2.1.4
Wpeasycart Wp Easycart	Version 2.1.5
Wpeasycart Wp Easycart	Version 2.1.6
Wpeasycart Wp Easycart	Version 2.1.7
Wpeasycart Wp Easycart	Version 2.1.8
Wpeasycart Wp Easycart	Version 2.1.9
Wpeasycart Wp Easycart	Version 3.0.0
Wpeasycart Wp Easycart	Version 3.0.10
Wpeasycart Wp Easycart	Version 3.0.11
Wpeasycart Wp Easycart	Version 3.0.12
Wpeasycart Wp Easycart	Version 3.0.13
Wpeasycart Wp Easycart	Version 3.0.14
Wpeasycart Wp Easycart	Version 3.0.15
Wpeasycart Wp Easycart	Version 3.0.16
Wpeasycart Wp Easycart	Version 3.0.17
Wpeasycart Wp Easycart	Version 3.0.18
Wpeasycart Wp Easycart	Version 3.0.19
Wpeasycart Wp Easycart	Version 3.0.1
Wpeasycart Wp Easycart	Version 3.0.20
Wpeasycart Wp Easycart	Version 3.0.2
Wpeasycart Wp Easycart	Version 3.0.3
Wpeasycart Wp Easycart	Version 3.0.4
Wpeasycart Wp Easycart	Version 3.0.5
Wpeasycart Wp Easycart	Version 3.0.6
Wpeasycart Wp Easycart	Version 3.0.7
Wpeasycart Wp Easycart	Version 3.0.8
Wpeasycart Wp Easycart	Version 3.0.9

Related CWEs

CWE-264

References (2)

http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/

Source: cve@mitre.org

ExploitThird Party Advisory

http://blog.rastating.com/wp-easycart-privilege-escalation-information-disclosure/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.