auxiliary/scanner/http/wordpress_content_injection

functional

WordPress REST API Content Injection

view exploit source metasploittype auxiliarypublished 2017-02-01catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-1001000US	high7.5OT high	84.9% (100th)	Exploit	2017-04-03
The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.