PatchTheCVEwpmarketplace vulnerabilities and fixes
Recent CVEs affecting wpmarketplace, with upgrade or downgrade steps. 2 tracked.
wpmarketplace has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-11-06. Highest priority: CVE-2014-9013 (score 61/100).
- CVE-2014-9014 MEDIUM 4.3 DOWNGRADE Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplac
- CVE-2014-9013 HIGH 8.8 DOWNGRADE The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows r
FAQ
How do I fix wpmarketplace vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpmarketplace being exploited right now?
None of the tracked wpmarketplace CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpmarketplace CVE should I patch first?
CVE-2014-9013 currently ranks highest (61/100): The ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin 2.4.0 for WordPress allows r.