漏洞平台

POC详情： 8a86f066fd7b3c5e0e2abd2afee0d2cd84f2aa6a

来源

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-better-wp-security-login-disclosure.yaml

关联漏洞

疑似Oday

描述

WordPress Solid Security (formerly iThemes Security/Better WP Security) plugin before 9.0.1 is vulnerable to login page disclosure. When the Hide Backend feature is enabled and comments require user registration, the secret login URL token is exposed in the HTML source via the itsec-hb-token parameter in the comment form login links.

文件快照


 id: wp-better-wp-security-login-disclosure

info:
  name: WordPress Solid Security < 9.0.1 - Unauthe

...

神龙机器人已为您缓存

备注

1. 建议优先通过来源进行访问。

2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。

3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。