POC Details: 46611d2757eee0adf2c72a07b14a0cc03b9a3b39

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/wordpress/wordpress-rocket-lazy-load-fpd.yaml

Associated Vulnerability

Likely 0-day

Description

WordPress Plugin LazyLoad files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly.

File Snapshot


 id: wordpress-rocket-lazy-load-fpd

info:
  name: WordPress LazyLoad Plugin - Full Path Disclosure
 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.