{"id":"CVE-2014-4725","aliases":["EUVD-2014-4644","GHSA-xgmx-rr3c-2xgc"],"status":"published","title":"The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote...","description":"The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.60656,"percentile":0.99153,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-287"],"published":"2014-07-27T18:00:00Z","modified":"2026-06-17T00:10:30Z","exploits":[{"source":"exploitdb","id":"EDB-33991","title":"WordPress Plugin MailPoet Newsletters 2.6.8 - 'wysija-newsletters' Arbitrary File Upload (Metasploit)","type":"remote","platform":"php","date":"2014-07-07","verified":true,"url":"https://www.exploit-db.com/exploits/33991"},{"source":"metasploit","id":"exploit/unix/webapp/wp_wysija_newsletters_upload","title":"Wordpress MailPoet Newsletters (wysija-newsletters) Unauthenticated File Upload","type":"exploit","platform":"PHP","date":"2014-07-01","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/webapp/wp_wysija_newsletters_upload"},{"source":"pocgithub","id":"AnotherSec/CVE-2014-4725","title":"AnotherSec/CVE-2014-4725","date":"2025-08-15","url":"https://github.com/AnotherSec/CVE-2014-4725"}],"products":[{"vendor":"mailpoet","product":"mailpoet_newsletters"}],"references":[{"url":"https://wordpress.org/plugins/wysija-newsletters/changelog/","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://blog.sucuri.net/2014/07/remote-file-upload-vulnerability-on-mailpoet-wysija-newsletters.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://blog.sucuri.net/2014/07/malware-infection-breaking-wordpress-sites.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://arstechnica.com/security/2014/07/mass-exploit-of-wordpress-plugin-backdoors-sites-running-joomla-magento-too/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2014/07/08/7","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://blog.sucuri.net/2014/07/mailpoet-vulnerability-exploited-in-the-wild-breaking-thousands-of-wordpress-sites.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4725"},{"url":"https://wordpress.org/plugins/wysija-newsletters/changelog"},{"url":"http://arstechnica.com/security/2014/07/mass-exploit-of-wordpress-plugin-backdoors-sites-running-joomla-magento-too"},{"url":"https://github.com/advisories/GHSA-xgmx-rr3c-2xgc"}],"sources":{"cve":[{"id":"CVE-2014-4725","description":"The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.","status":"published","published":"2014-07-27T18:00:00Z","modified":"2024-08-06T11:27:36.181Z","updated_at":"2026-11-02T14:33:45.938615Z"}],"euvd":[{"id":"EUVD-2014-4644","description":"The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.","status":"published","published":"2014-07-27T18:00:00Z","modified":"2024-08-06T11:27:36Z","updated_at":"2026-11-03T01:57:05.209854Z"}],"ghsa":[{"id":"GHSA-xgmx-rr3c-2xgc","title":"The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote...","description":"The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.","status":"published","published":"2022-05-17T04:38:56Z","modified":"2025-04-12T12:37:11Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:01:18.41255Z"}],"nvd":[{"id":"CVE-2014-4725","description":"The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.","status":"published","published":"2014-07-27T18:55:05.027Z","modified":"2026-06-17T00:10:30.96Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:02:55.19899Z"}]}}