CVE-2018-7422 PoC — WordPress Site Editor插件信息泄露漏洞

Source

https://github.com/JacobEbben/CVE-2018-7422

Associated Vulnerability

Title: WordPress Site Editor插件信息泄露漏洞 (CVE-2018-7422)
Description:A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.

Description

Local File Inclusion in WordPress Plugin Site Editor 1.1.1

Readme

# CVE-2018-7422
Exploit for CVE-2018-7422: Local File Inclusion in WordPress Plugin Site Editor 1.1.1

DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on systems you have written permission to exploit.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →