CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects WordPress. Its EPSS score suggests a 59.7% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2014-4725
Severity
HIGH
CVSS
7.5
EPSS
59.68%
WordPress
Original NVD Description
The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-content/uploads/wysija/themes/mailp/.