CVE-2018-15877

PoC ×4—

CVSS 3.1

8.8 high

EPSS

77%p100

Published

Aug 26, 2018 (Aug 26, 2018)

Modified

Jun 17, 2026

Description

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request.

Vendors: plainview activity monitor project
Products: plainview activity monitor
Ecosystems: WordPress
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (77.0%)

In the news0 stories

No ingested article mentions this CVE yet.