POC详情： 797f378c4206ea580a3b4a5d97ddc277e5f7eaf6

来源
https://github.com/gh-ost00/CVE-2024-4898
关联漏洞
标题： WordPress plugin InstaWP Connect 安全漏洞 (CVE-2024-4898)
描述：WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin InstaWP Connect 0.1.0.38 版本之前存在安全漏洞，该漏洞源于缺少 REST API 调用的授权检查。
描述
CVE-2024-4898 InstaWP Connect – 1-click WP Staging & Migration <= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
介绍
# CVE-2024-4898-Poc
CVE-2024-4898 InstaWP Connect – 1-click WP Staging &amp; Migration &lt;= 0.1.0.38 - Missing Authorization to Unauthenticated API setup/Arbitrary Options Update/Administrative User Creation
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/instawp-connect/instawp-connect-1-click-wp-staging-migration-01038-missing-authorization-to-unauthenticated-api-setuparbitrary-options-updateadministrative-user-creation

File: wp-content/plugins/instawp-connect/includes/class-instawp-rest-api.php
![image](https://github.com/truonghuuphuc/CVE-2024-4898-Poc/assets/20487674/d6287d11-bf9d-4cb9-9dc6-7c49904d7757)
![image](https://github.com/truonghuuphuc/CVE-2024-4898-Poc/assets/20487674/23e2517f-9c56-4ca7-91f7-0111d5416f41)
![image](https://github.com/truonghuuphuc/CVE-2024-4898-Poc/assets/20487674/b34e0d39-163e-46ce-881f-119aa20d535c)

File: wp-content/plugins/instawp-connect/includes/class-instawp-tools.php
![image](https://github.com/truonghuuphuc/CVE-2024-4898-Poc/assets/20487674/4962fb44-6c21-4e57-ba66-182479444401)

## Poc:
Create user role Administrator

Create api key: https://app.instawp.io/user/api-tokens
![image](https://github.com/truonghuuphuc/CVE-2024-4898-Poc/assets/20487674/3dfe5d78-5311-4a8a-8d13-ad2363ea9925)

https://github.com/truonghuuphuc/CVE-2024-4898-Poc/assets/20487674/01be7c07-1894-4e70-9966-5ba7dce1fd2a
文件快照

 [4.0K]  /data/pocs/797f378c4206ea580a3b4a5d97ddc277e5f7eaf6
├── [1.0K]  CVE-2024-4898
├── [1.1M]  instawp-connect.0.1.0.38.zip
└── [1.3K]  README.md

0 directories, 3 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。