CVE-2014-9308 is an unrestricted file upload vulnerability in the WP EasyCart (WordPress Shopping Cart) plugin before version 3.0.9. This flaw allows authenticated attackers to upload arbitrary executable files through the banner upload script, leading to remote code execution. With a CVSS score of 6.5, this vulnerability is moderately severe, requiring authentication but being easily exploitable over the network with potential for partial impact to confidentiality, integrity, and availability. While not on the CISA KEV list, exploit modules are readily available in Metasploit and ExploitDB, indicating a high likelihood of exploitation. Despite this, there is no recorded community discussion or media coverage for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.0.8CPE matchmatch criteria | cpe:2.3:a:wpeasycart:wp_easycart:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:S/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.