EDB-46662
functionalWordPress Core 5.0.0 - Crop-image Shell Upload (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2019-04-05catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-8943US | medium6.5 | Exploit | ||
WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output image to an arbitrary directory via a filen… | ||||
| CVE-2019-8942US | high8.8 | Exploit | ||
WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an arbitrary string, such as one ending with… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan