EDB-40288
functionalWordPress Core 4.5.3 - Directory Traversal / Denial of Service
view exploit source exploit_dbverifiedtype webappsauthor Yorick Kosterpublished 2016-08-22catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-6897US | medium6.5 | Exploit | ||
Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress before 4.6 allows remote attackers to hijac… | ||||
| CVE-2016-6896US | high7.1 | Exploit | ||
Directory traversal vulnerability in the wp_ajax_update_plugin function in wp-admin/includes/ajax-actions.php in WordPress 4.5.3 allows remote authenticated users to cause a denial… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan