CVE-2014-9260

High · 8.8

CVSS

8.8

EPSS

11.1%

Published

Aug 7, 2017

CISA due date

—

The record

The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every WordPress option.

Affected packages

Ecosystem	Package	Introduced	Fixed