Exploit for Path Traversal in Wordpress

🗓️ 18 Aug 2019 04:50:37Reported by PalmTreeForestType

Path Traversal vulnerability in WordPress 3.8 allowing unauthenticated modification of page/post content via REST API. Authenticated XSS vulnerability in WordPress 4.6.1 enabling unauthenticated page/post content modification via REST API

Reporter	Title	Published	Views	Family All 99
GithubExploit	Exploit for Cross-Site Request Forgery (CSRF) in Wordpress	19 May 202022:09	–	githubexploit
GithubExploit	Exploit for Cross-Site Request Forgery (CSRF) in Wordpress	29 Jun 202108:57	–	githubexploit
FreeBSD	wordpress -- multiple issues	23 Sep 201700:00	–	freebsd
BDU FSTEC	The vulnerability of the wp_ajax_replyto_comment function in ajax-actions.php and the wpHandleCommentSubmission function in comment.php of the WordPress content management system allows attackers to access confidential data, compromise its integrity, and cause service failures.	14 Aug 202000:00	–	bdu_fstec
CNVD	WordPress ZipArchive and PclZip Component Directory Traversal Vulnerability	25 Sep 201700:00	–	cnvd
CNVD	WordPress Cross-Site Request Forgery Vulnerability (CNVD-2020-28775)	15 Mar 201900:00	–	cnvd
Check Point Advisories	WordPress Core Remote Code Execution (CVE-2019-9787)	20 Nov 201900:00	–	checkpoint_advisories
CVE	CVE-2017-14719	23 Sep 201720:00	–	cve
CVE	CVE-2019-9787	14 Mar 201916:00	–	cve
Cvelist	CVE-2017-14719	23 Sep 201720:00	–	cvelist