CVE-2023-2916 PoC — WordPress Plugin InfiniteWP Client 信息泄露漏洞

Description

CVE-2023-2916 PoC

介绍

# CVE-2023-2916
CVE-2023-2916 PoC
The InfiniteWP Client plugin for WordPress, in versions up to and including 1.11.1, is vulnerable to a Sensitive Information Exposure flaw. This vulnerability allows authenticated attackers with subscriber-level permissions or above to extract sensitive data, including configuration details. Exploitation of this vulnerability is only possible if the plugin has not been configured previously. When combined with another arbitrary plugin installation and activation vulnerability, it may lead to remote management of the site and potential elevation of privileges.

文件快照

备注