Arbitrary Command Execution Vulnerability in iMember360 for WordPress
CVE-2014-8949

Currently unrated

Key Information:

Vendor

Wordpress
Status
Imember360
Vendor
CVE Published:
16 November 2014

What is CVE-2014-8949?

The iMember360 plugin versions 3.8.012 through 3.9.001 for WordPress features a vulnerability that allows remote authenticated administrators to execute arbitrary commands. This is enabled through improperly handled shell metacharacters in the i4w_trace parameter. The issue poses additional concerns as it can potentially be exploited in conjunction with a related vulnerability, facilitating remote code execution by attackers. Overall, this vulnerability may lead to serious security breaches, given the unclear scope regarding privilege escalation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://secunia.com/advisories/58094
third-party-advisoryx_refsource_SECUNIA
http://packetstormsecurity.com/files/126324/WordPress-iMe...
x_refsource_MISC
http://www.exploit-db.com/exploits/33076
exploitx_refsource_EXPLOIT-DB

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.