CVE-2014-9260

The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2017-08-07

Last modified

2024-08-06

Affected products

• Download Manager (W3eden)

References

• http://packetstormsecurity.com/files/130690/WordPress-Download-Manager-2.7.2-Privilege-Escalation.html