CVE-2016-10972 PoC — WordPress newspaper theme 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10972.yaml

Associated Vulnerability

Title: WordPress newspaper theme 安全漏洞 (CVE-2016-10972)
Description:The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.

Description

Newspaper Theme versions 6.4 to 6.7.1 for WordPress lacked proper options access control through td_ajax_update_panel, which led to a Privilege Escalation vulnerability.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →