CVE-2022-1609 PoC — The School Management < 9.9.7 - Unauthenticated RCE via REST api

Source

https://github.com/iaaaannn0/cve-2022-1609-exploit

Associated Vulnerability

Title: The School Management < 9.9.7 - Unauthenticated RCE via REST api (CVE-2022-1609)
Description:The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.

Description

Exploit for CVE-2022-1609 WordPress Weblizar Backdoor.

Readme

# cve-2022-1609-exploit
Exploit for CVE-2022-1609 WordPress Weblizar Backdoor.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →