The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the i…

Published 8 y ago 2018-08-26 · modified 4 mo ago 2026-06-17 · JSON

CVSS

8.8

v3.1 · NVD

CISA KEV

not known exploited

EPSS

76.7%

percentile 100%

Public exploits

Metasploit · Exploit-DB

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request.

Exploit prediction (EPSS)

76.75% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

Metasploit exploit/unix/webapp/wp_plainview_activity_monitor_rce Wordpress Plainview Activity Monitor RCE · metasploit exploit, excellent rank · 2018-08-26
EDB-50110 WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2) · webapps · 2021-07-07
EDB-45274 WordPress Plugin Plainview Activity Monitor 20161228 - (Authenticated) Command Injection · webapps · 2018-08-27

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	8.8	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	9.0	`AV:N/AC:L/Au:S/C:C/I:C/A:C`

Classification

Weakness

CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

github.com /aas-n/CVE/tree/master/CVE-2018-15877 · x_refsource_MISC, x_transferred
exploit-db.com /exploits/45274/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
packetstormsecurity.com /files/155502/WordPress-Plainview-Activity-Monitor-20161228-Remote-Command-Execution.html · x_refsource_MISC, x_transferred
packetstormsecurity.com /files/163425/WordPress-Plainview-Activity-Monitor-20161228-Remote-Code-Execution.html · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2018-15877
NVD: CVE-2018-15877

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.