CVE-2014-3114

CRITICAL

ezpz-one-click-backup < 12.03.10 - Remote Code Execution via cmd Parameter

Title source: llm

Description

The EZPZ One Click Backup (ezpz-one-click-backup) plugin 12.03.10 and earlier for WordPress allows remote attackers to execute arbitrary commands via the cmd parameter to functions/ezpz-archive-cmd.php.

References (1)

Core 1

Core References

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2014/05/01/11

Scores

CVSS v3 9.8

EPSS 0.0358

EPSS Percentile 88.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-77

Status published

Products (1)

ezpz-one-click-backup_project/ezpz-one-click-backup < 12.03.10

Published Apr 10, 2018

Tracked Since Feb 18, 2026