Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-8802. PoCs published by Kacper Szurek.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in Pie Register 2.0.13, allowing an attacker to import a CSV file with an administrator account and activate it to gain elevated privileges.
Description
The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in Pie Register 2.0.13, allowing an attacker to import a CSV file with an administrator account and activate it to gain elevated privileges.