CVE-2014-125093 : A vulnerability has been found in Ad Blocking Detector Plugin up to 1.2.1 on WordPress and classified as problematic. Th

A vulnerability has been found in Ad Blocking Detector Plugin up to 1.2.1 on WordPress and classified as problematic. This vulnerability affects unknown code of the file ad-blocking-detector.php. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 1.2.2 is able to address this issue. The patch is identified as 3312b9cd79e5710d1e282fc9216a4e5ab31b3d94. It is recommended to upgrade the affected component. VDB-222610 is the identifier assigned to this vulnerability.

Published 2023-03-10 02:15:58

Updated 2024-05-17 00:58:23

Source VulDB

View at NVD, CVE.org

Vulnerability category: Information leak

Exploit prediction scoring system (EPSS) score for CVE-2014-125093

EPSS FAQ

0.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 73 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2014-125093

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	VulDB
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
4.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	VulDB
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	VulDB
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2014-125093

https://vuldb.com/?id.222610

Login required
Permissions Required;Third Party Advisory;VDB Entry
https://vuldb.com/?ctiid.222610

Login required
Permissions Required;Third Party Advisory;VDB Entry
https://github.com/wp-plugins/ad-blocking-detector/commit/3312b9cd79e5710d1e282fc9216a4e5ab31b3d94

Fix full path disclosure vulnerability and increment version. · wp-plugins/ad-blocking-detector@3312b9c · GitHub
Patch
https://github.com/wp-plugins/ad-blocking-detector/releases/tag/1.2.2

Release 1.2.2: Fix FPD security vulnerability and increment version. · wp-plugins/ad-blocking-detector · GitHub
Release Notes

Products affected by CVE-2014-125093

Getadmiral » Ad Blocking Detector » For Wordpress
Versions before (<) 1.2.2
cpe:2.3:a:getadmiral:ad_blocking_detector:*:*:*:*:*:wordpress:*:*
Matching versions

Vulnerability Details : CVE-2014-125093

Exploit prediction scoring system (EPSS) score for CVE-2014-125093

CVSS scores for CVE-2014-125093

CWE ids for CVE-2014-125093

References for CVE-2014-125093

Products affected by CVE-2014-125093