CVE-2021-24917 PoC — WordPress 插件安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24917.yaml

Associated Vulnerability

Title:WordPress 插件安全漏洞 (CVE-2021-24917)
Description:WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress 插件是WordPress开源的一个应用插件。 WordPress插件存在安全漏洞，该漏洞源于在1.9.1之前的WPS隐藏登录WordPress插件有一个bug，它允许通过设置一个随机引用字符串，并以未经身份验证的用户请求wp-admin options.php来获得秘密登录页面。

Description

WordPress WPS Hide Login plugin before 1.9.1 is susceptible to incorrect authorization. An attacker can obtain the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user. This reveals the secret login location.

File Snapshot


 id: CVE-2021-24917

info:
  name: WordPress WPS Hide Login <1.9.1 - Information Disclosure
  author:

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2021-24917 PoC — WordPress 插件 安全漏洞