{"id":"CVE-2018-15877","aliases":["EUVD-2018-7734","GHSA-9x2f-2wff-79qv"],"status":"published","title":"The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command...","description":"The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor\u0026tab=activity_tools request.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.76748,"percentile":0.9955,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2018-08-26T07:00:00Z","modified":"2026-06-17T01:43:15Z","exploits":[{"source":"exploitdb","id":"EDB-45274","title":"WordPress Plugin Plainview Activity Monitor 20161228 - (Authenticated) Command Injection","type":"webapps","platform":"php","date":"2018-08-27","verified":true,"url":"https://www.exploit-db.com/exploits/45274"},{"source":"exploitdb","id":"EDB-50110","title":"WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)","type":"webapps","platform":"php","date":"2021-07-07","url":"https://www.exploit-db.com/exploits/50110"},{"source":"metasploit","id":"exploit/unix/webapp/wp_plainview_activity_monitor_rce","title":"Wordpress Plainview Activity Monitor RCE","type":"exploit","platform":"PHP","date":"2018-08-26","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/webapp/wp_plainview_activity_monitor_rce"},{"source":"pocgithub","id":"Cinnamon1212/CVE-2018-15877-RCE","title":"Cinnamon1212/CVE-2018-15877-RCE","date":"2021-09-04","url":"https://github.com/Cinnamon1212/CVE-2018-15877-RCE"},{"source":"pocgithub","id":"cved-sources/cve-2018-15877","title":"cved-sources/cve-2018-15877","date":"2019-02-08","url":"https://github.com/cved-sources/cve-2018-15877"},{"source":"pocgithub","id":"firasotoom85-droid/wp-plainview-auth-RCE-broken-cookie-to-session-fix","title":"firasotoom85-droid/wp-plainview-auth-RCE-broken-cookie-to-session-fix","date":"2026-09-25","url":"https://github.com/firasotoom85-droid/wp-plainview-auth-RCE-broken-cookie-to-session-fix"}],"products":[{"vendor":"plainview_activity_monitor_project","product":"plainview_activity_monitor"}],"references":[{"url":"https://github.com/aas-n/CVE/tree/master/CVE-2018-15877","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/45274/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15877"},{"url":"https://github.com/advisories/GHSA-9x2f-2wff-79qv"}],"sources":{"cve":[{"id":"CVE-2018-15877","description":"The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor\u0026tab=activity_tools request.","status":"published","published":"2018-08-26T07:00:00Z","modified":"2024-08-05T10:10:04.724Z","updated_at":"2026-11-02T14:35:03.288698Z"}],"euvd":[{"id":"EUVD-2018-7734","description":"The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor\u0026tab=activity_tools request.","status":"published","published":"2018-08-26T07:00:00Z","modified":"2024-08-05T10:10:04Z","updated_at":"2026-11-03T02:39:43.665553Z"}],"ghsa":[{"id":"GHSA-9x2f-2wff-79qv","title":"The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command...","description":"The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor\u0026tab=activity_tools request.","status":"published","published":"2022-05-13T01:08:52Z","modified":"2023-02-01T05:03:28Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:50:03.88435Z"}],"nvd":[{"id":"CVE-2018-15877","description":"The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor\u0026tab=activity_tools request.","status":"published","published":"2018-08-26T07:29:00.37Z","modified":"2026-06-17T01:43:15.197Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:04:36.842579Z"}]}}