CVE-2018-15877: Plainview Activity Monitor Project Plainview Activity Monitor

High severity, CVSS 8.8. EPSS: 77% chance of exploitation in the next 30 days.

The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ip parameter of a wp-admin/admin.php?page=plainview_activity_monitor&tab=activity_tools request.

Affected products

• Plainview Activity Monitor Project Plainview Activity Monitor: before 20180826 (fixed in 20180826)

Published 2018-08-26. Last modified 2026-06-17.