CVE-2014-5337
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to...
CVE-2014-5337 is a medium vulnerability (CVSS 5.0) in Wordpress Mobile Pack Project Mobile Pack, published August 29, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 17.0%, the 97th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 17.0%EPSS, 97th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
Exploit likelihood
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | WordPress Mobile Pack Information Disclosure Vulnerability |
What each source reports
NVD Score used
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
- Record
CVE-2014-5337- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
- Record
CVE-2014-5337- Updated
- 2026-11-02
EUVDEUVD-2014-5226No score
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
- Record
EUVD-2014-5226- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p9g4-cj6g-47x3No score
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to...
The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive information via an exportarticles action to export/content.php.
- Record
GHSA-p9g4-cj6g-47x3- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
wordpress.org/plugins/wordpress-mobile-pack/changelog
securityfocus.com/bid/69292
secunia.com/advisories/60584
security.dxw.com/advisories/information-disclosure-vulnerability-in-wordpress-mobile-pack-allows-anybody-to-read-password-protected-posts
nvd.nist.gov/vuln/detail/CVE-2014-5337
github.com/advisories/GHSA-p9g4-cj6g-47x3