Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin eShop Code Injection - CVE-2015-3421 - Vulnerability Database
WP Plugin Eshop

WordPress Plugin eShop Code Injection - CVE-2015-3421

Critical
Reference: CVE-2015-3421
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-3421
Title: WordPress Plugin eShop Code Injection
Overview:

WordPress Plugin eShop is prone to a vulnerability that lets remote attackers inject and execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary code within the context of the affected webserver process this may result in total compromise of the web server. WordPress Plugin eShop version 6.3.11 is vulnerable prior versions may also be affected.