CVE-2023-3460 PoC — Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

Source

https://github.com/TranKuBao/CVE-2023-3460_FIX

Associated Vulnerability

Title: Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation (CVE-2023-3460)
Description:The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild.

Description

Cái này dựng lên với mục đích cho ae tham khảo, chê thì đừng có xem. :))))

Readme

# CVE-20233460
Lab này dựng lên với mục địch học tập và leo quyền. Để thực hiện kĩ năng leo quyền ae có thể đọc thêm link ở bên dưới.
https://viblo.asia/p/leo-thang-dac-quyen-trong-linux-linux-privilege-escalation-1-using-suid-bit-QpmlexgrZrd

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →