What happened
A public source linked this CVE to an advisory or demonstration repository. Review the original reference before use.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 45274WordPress Plugin Plainview Activity Monitor 20161228 - (Authenticated) Command InjectionLydéric Lefebvre2018-08-27VerifiedExploit-DB 50110WordPress Plugin Plainview Activity Monitor 20161228 - Remote Code Execution (RCE) (Authenticated) (2)Beren Kuday GÖRÜN2021-07-07VerifiedPoC-in-GitHub · cved-sources/cve-2018-15877cve-2018-15877★ 0cved-sources2019-02-08CandidatePoC-in-GitHub · Cinnamon1212/CVE-2018-15877-RCEWordpress Plainview Activity Monitor Plugin RCE (20161228)★ 1Cinnamon12122021-09-04CandidatePoC-in-GitHub · firasotoom85-droid/wp-plainview-auth-RCE-broken-cookie-to-session-fixWP Plainview Activity Monitor auth RCE fix: broken manual cookie parse to stable Session handling. CVE-2018-15877 educational fix.★ 0firasotoom85-droid2026-09-25CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.