What is CVE-2014-8749?

CVE-2014-8749 is a vulnerability in Ait-pro Bulletproof_security. Published 2014-12-01.

Is CVE-2014-8749 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Ait-pro Bulletproof_security

CVE-2014-8749

Server-side request forgery (SSRF) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to trigger outbound requests that authenticate to arbitrary databases vi…

EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.

Affected products

Ait-pro Bulletproof_security
N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2014-8749?: CVE-2014-8749 is a vulnerability in Ait-pro Bulletproof_security. Published 2014-12-01.
Is CVE-2014-8749 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.