Back to Database
Status published
High
CVE-2018-15877
The Plainview Activity Monitor plugin before 20180826 for WordPress is...
Vulnerability Description
The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15877
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/aas-n/CVE/tree/master/CVE-2018-15877
- https://www.exploit-db.com/exploits/45274/
- http://packetstormsecurity.com/files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html
- http://packetstormsecurity.com/files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html
Affected Vendor
plainview activity monitor project
View all reports →Affected Software
plainview activity monitor
Vulnerable Versions:
0
Timeline
Official Publish:
August 26th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.