CVE-2014-9735
EXPLOITED NUCLEIThemePunch Slider Revolution <3.0.96 & Showbiz Pro <1.7.1 - RCE
Title source: llmExploitation Summary
CVE-2014-9735 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 2 public exploits from researchers including Metasploit, Simo Ben youssef, including a Metasploit module exploits/unix/webapp/wp_revslider_upload_execute.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary file upload vulnerability in the WordPress RevSlider plugin (CVE-2014-9735), allowing remote code execution by uploading a malicious PHP file via a crafted ZIP archive.
Description
The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does not properly restrict access to administrator AJAX functionality, which allows remote attackers to (1) upload and execute arbitrary files via an update_plugin action; (2) delete arbitrary sliders via a delete_slider action; and (3) create, (4) update, (5) import, or (6) export arbitrary sliders via unspecified vectors.
Exploits (2)
This Metasploit module exploits an arbitrary file upload vulnerability in the WordPress RevSlider plugin (CVE-2014-9735), allowing remote code execution by uploading a malicious PHP file via a crafted ZIP archive.
This Metasploit module exploits an arbitrary PHP file upload vulnerability in the WordPress RevSlider plugin (CVE-2014-9735). It uploads a malicious ZIP archive containing a PHP payload, which is then executed to achieve remote code execution.